Not only that but the Privacy Policy is a straight up lie. No https yet:

"In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.

We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information."

I really like the service, but it's free to get https setup and takes just about 0 effort thanks to letsencrypt.