# Security/Privacy of Cloud Variables **URL:** \ **Category:** Questions about Thunkable X\ **Tags:** firebase, privacy, cloud-variable\ **Created:** [May 25, 2023, 9:35pm UTC](https://community.thunkable.com/t/security-privacy-of-cloud-variables/2436535 "2023-05-25T21:35:15Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Mark](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/mark/32/18133_2.png) [@Mark](https://community.thunkable.com/u/Mark)\ **Post date:** [May 25, 2023, 9:35pm UTC](https://community.thunkable.com/t/security-privacy-of-cloud-variables/2436535/1 "2023-05-25T21:35:15Z")
I’m helping out some people who are trying to create an app with some reasonably strong security and privacy requirements for their stored data. One requirement is that some of the data needs to be user-specific (i.e. not accessible by other users) and some might only be accessible by specific groups of users. I’d like to suggest that they (at least initially) use Cloud Variables (with their own Firebase DB) for their storage and I can see how I can code the app to control access but I’m not sure if that is good enough. For example, could a malevolent user of the app discover the underlying Firebase API key (using some network sniffer, for example) and use that to access the data? Are there any other Security/Privacy concerns with Cloud Variables that we should be aware of? Should we use something other than Cloud Variables that might give us more Security/Privacy? Thanks in advance. -Mark ---
**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/thunkable/original/3X/0/f/0f59f292712368bce16ff80133ae10de8a6f27e8.png) [@system](https://community.thunkable.com/u/system)\ **Post date:** [August 23, 2023, 9:35pm UTC](https://community.thunkable.com/t/security-privacy-of-cloud-variables/2436535/2 "2023-08-23T21:35:16Z")
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.