Can anybody else add data to my goal?
In some cases, yes. For example when using our Boss as a Service integration, or when you're interacting with our support team.
With the email bot, if data comes in from an unrecognized address we tentatively accept it (since almost 100% of the time so far this has been the actual user sending email from a different address than the one they signed up for Beeminder with) and just let you know so you can cry foul in case of shenanigans.
If someone does add data to your goal without your permission/knowledge, just reply to that warning email and let us know! We'll help you remove any spurious data, and blacklist the address that tried to send data to your goal.
Keywords: privacy, security, rogue data