Disclosure Policy

• - Let us know as soon as possible upon discovery of a potential security issue, and we'll make every effort to quickly resolve the issue.
• - Provide us a reasonable amount of time to resolve the issue before any disclosure to the public or a third-party.
• - Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service. Only interact with accounts you own or with explicit permission of the account holder.

Exclusions

• - Denial of service
• - Spamming
• - Social engineering (including phishing) of Starknex employees, contractors or affiliates
• - Physical attacks against Starknex employees, offices, properties, devices or data centers
• - Any vulnerability obtained through the compromise of Starknex employee accounts
• - Generic information disclosure (e.g. debug trace, server headers, server/software versions, server errors) without additional impact
• - Issues with SPF, DKIM or DMARC Records on Starknex Domains
• - Missing best practices in Content Security Policy
• - Vulnerabilities that are already known (e.g. discovered and reported by other researchers or by Starknex internal teams)
• - Reports from Automated Tools/Scans with no proof of a unique security threat
• - Open Ports/Services with no proof of concept of demonstrating a vulnerability

Access to personal data

Safe Harbor