Security

What's in scope

The sites I run: uncleversace.com, theysaidit.app, accumulatedknowledge.app and uncleversacebot.com. Services I only use, like Twitch, Discord or Google, are out of scope; report those to their owners.

How to report

Send the details through the contact form: what you found, where, and the steps to reproduce it. Please don't include anyone's personal data beyond what's needed to show the problem. I aim to acknowledge a report within a few days and to keep you updated until it's fixed.

Safe harbor

If you act in good faith - you avoid harming other people's data or privacy, don't degrade the sites for others, don't run automated scanners against them, and give me a reasonable time to fix the problem before you disclose it - I won't pursue or support any legal action against you for your research.

Rewards

These are one-person hobby projects, so there's no bug bounty. With your permission, I'm happy to credit you in the changelog entry for the fix.

Machine-readable contact details are in /.well-known/security.txt.