Privasi, data & keamanan
Security, Account Protection and Vulnerability Reporting Policy
Security expectations, prohibited abuse and a responsible path for reporting vulnerabilities.
Terakhir diperbarui: 2 September 2026
Ditujukan untuk: All visitors and users
Penting: Dokumen ini adalah pernyataan kebijakan produk dan pengendalian risiko, bukan nasihat hukum pribadi. Dokumen ini tidak menghapus hak yang tidak dapat dilepaskan dan tidak boleh dibaca sebagai klaim bahwa setiap undang-undang yang disebutkan berlaku di setiap yurisdiksi.
Security baseline
- Use least privilege, secret separation, rate limits and repository-enforced infrastructure boundaries.
- Do not expose internal state services or credentials publicly.
- Preserve auditability for security-relevant changes and incidents.
Research and reporting
Good-faith vulnerability reports should describe the issue and reproduction safely without accessing unnecessary user data, persistence, extortion, destructive testing, credential harvesting or disruption. Authorization for security testing is not implied by this policy.