# THE NET
# Security policy + contact information
# https://www.rfc-editor.org/rfc/rfc9116
#
# This site is built and maintained by a single person (Travis Jenkins).
# If you find something that looks like a security issue, please reach out
# at the Contact address below. Reports in good faith are welcome.

Contact: mailto:info@hydraulictoybox.com
Expires: 2027-06-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://the-network-empowering-tomorrow.net/.well-known/security.txt

# Scope
# In scope:
#   - misconfigurations on the deployed site (headers, redirects, exposed config)
#   - third-party leaks (Cloudflare, font CDN, embedded scripts)
#   - content authorization concerns (canonical fan-work appearing where it shouldn't)
#
# Out of scope:
#   - vulnerabilities in published HTML pages or canvas widgets (no auth, no data collection)
#   - automated scanner reports without manual verification
#   - reports about anything covered by the published noindex / nofollow policy
#
# This site does not collect, store, process, or share PII. There is no login.
# No cookies are set by site code. No tracking pixels. No analytics.
#
# Disclosure preference
# Coordinated disclosure on a reasonable timeline.
# This is a one-person project. Response time depends on real life.
# I will acknowledge receipt within a few days.
#
# Hall of fame / acknowledgments
# If you'd like to be named in a public acknowledgments file after a report
# is resolved, say so in your email. Otherwise reports stay confidential.