Responsible disclosure
Found a security problem? Tell us.
This is a small static website with one contact form, and we would still rather hear about a weakness from you than from someone who used it.
How to report
Email [email protected] with "Security report" in the subject. Tell us what you found, where, and how to reproduce it. The same details are published at /.well-known/security.txt.
What we will do
- Acknowledge your report within five business days.
- Fix confirmed problems as quickly as we can, and tell you when it is done.
- Credit you here if you would like, or keep your name out of it if you prefer.
- Not take legal action against good-faith research that follows the rules below.
Please
- Do not access, change or delete anyone's data, including messages sent through the contact form.
- Do not run denial-of-service tests, spam the form or use automated scanners at high volume.
- Do not publish the problem before we have had a reasonable chance to fix it.
We do not run a paid bug bounty.