Protecting personal information, and keeping our systems secure, are priorities at Cafetalk. This page explains risks worth knowing, habits that help, and what we do on our side.
Notices about security issues that may matter to people who use Cafetalk.
On October 22, 2026, we applied security updates after a vulnerability was announced in software used to operate Cafetalk. The appropriate changes are in place. We do not publish technical details of this kind of issue.
You do not need to take any action.
A few habits make Cafetalk, and the internet in general, safer. The list below is a starting point.
Cafetalk checks tutors through interviews and identity verification. Even so, do not share personal information with a tutor or a student.
Updates are easy to put off, and they often close security holes that have just been found. Install them when your operating system or browser offers them.
A malicious page can harm your device, or take information from it, when you open it. If something looks unexpected, leave it closed.
Use a password for Cafetalk that you do not use on any other site. A long password is harder to guess. A password manager can remember it for you.
Cafetalk stores passwords so they cannot be read back, including by Cafetalk staff. Cafetalk support will never ask you for your password. If a message asks for it, treat the message as a scam and contact us.
You can change your Cafetalk password here:
Unwanted email is common. If one arrives, these habits limit the harm.
Opening it can run harmful software, or show content you did not ask for. If you do not know the sender, delete the message without opening it.
An attachment you were not expecting can infect your device. Delete the message instead of opening the file.
A link can lead to a malicious site, or tell the sender that your address is active. If you need to check something on Cafetalk, open the site yourself.
A message can copy a well-known company, including Cafetalk. We will not email you to ask for your password or other secrets. If a message does that, do not enter anything.
If a message that appears to come from Cafetalk asks for personal information, or if you want to tell us about a security concern, contact us from the inquiries page.
These are the main measures Cafetalk uses to protect customer information.
HTTPS protects traffic between your browser and Cafetalk.
A web application firewall watches the site, detects attacks, and blocks them.
Card numbers entered when you purchase points are not stored on Cafetalk systems. A card payment company handles the payment.
Passwords are stored so they cannot be read back, including by Cafetalk staff.
Staff email accounts require two-step verification, and we keep customer information off paper.
Sensitive identity verification documents, and documents submitted with a tutor application, are deleted within two weeks of submission.
Other measures are in place that we do not describe publicly, because describing them would make them less effective. If you have a question, please use the inquiries page.
English
日本語
简体中文
繁體中文
한국어
Italiano
español
Deutsch
Русский