SECURITY.md (970B)
1 # Security Policy 2 3 ## Supported Versions 4 5 Please use the latest version of this project to ensure you have the latest security patches. 6 7 ## Reporting a Vulnerability 8 9 We take the security of this project seriously. If you discover a security vulnerability, please do **NOT** open a public issue. 10 11 Instead, please send an email to: 12 **amitddutta4255@gmail.com** 13 14 Please include: 15 - A description of the vulnerability. 16 - Steps to reproduce the issue. 17 - Any relevant code snippets or logs (redacted). 18 19 We will acknowledge your email within 48 hours and will keep you updated on the progress of the fix. 20 21 ## Privacy & Logs 22 23 This application handles private communication data. 24 - **Strict No-Logging Policy:** The application is designed to never output message content to system logs (stdout/stderr). 25 - If you modify the source code, you are responsible for maintaining this policy to prevent leaking private messages into server logs (e.g., Render or Heroku logs).