# Gumoji security.txt (RFC 9116). The build serves this file at
# /.well-known/security.txt; edit it here, no code needed.
Contact: mailto:security@gumoji.com
# No Encryption field yet: our PGP key is not published. Add
# "Encryption: <https URL of the key>" once it is (docs/placeholders.md).
Policy: https://gumoji.com/legal/security-policy/
Preferred-Languages: en, nl
Canonical: https://gumoji.com/.well-known/security.txt
Expires: 2027-10-01T00:00:00Z