CHANGELOG
Notable updates to Hogmatix. We treat the security and privacy of your connected accounts as a first-class feature, and we document the work here.
September 29, 2026
YouTube uploads are out of beta
Google has verified Hogmatix for YouTube uploads, so the YouTube workspace is no longer in beta.
- No more "unverified app" screen. Connecting a YouTube channel goes straight to Google's normal permission screen.
- Your visibility choice is kept. Videos go up as Public, Unlisted or Private, exactly as you pick. They are no longer forced to Private.
- Clearer uploads. The workspace shows your channel's picture, explains each visibility option, counts title characters, and links every finished upload to YouTube.
June 5, 2026
Account isolation & privacy hardening
This release significantly strengthens how Hogmatix keeps every user's data private and separate. Highlights:
- Stronger account isolation. Your connected X, TikTok, and YouTube accounts — and your scheduled posts, captions, and analytics — are now strictly accessible only to you. Every account is bound to its owner end to end.
- Fail-closed authentication everywhere. Every data and action endpoint now requires a valid, approved session before it returns or changes anything.
- Hardened account connections. Connecting a social account now cryptographically binds that connection to the signed-in user who initiated it, and your session credentials are never placed in a URL.
- Defense in depth. Added request rate limiting, a strict Content-Security-Policy, additional HTTP security headers, and stricter error handling so internal details are never exposed.
This release was developed and verified through an independent, multi-model security review. If you have connected a TikTok or YouTube account previously, you may be asked to reconnect it once — this is expected and ensures the connection is re-established through the new, more secure flow.
