Legal — Security policy
Found something?Tell us.
short summary of how Gumoji handles vulnerability reports
Checked 14 Oct 2026
Reporting a vulnerability
Write to security@gumoji.com. what a good report contains, and whether encrypted mail is expected
What we ask of you
the rules of engagement: what is in scope, what testing is acceptable, how long to keep a finding private
What you can expect from us
acknowledgement and fix timelines, whether reporters are credited, and the safe-harbour statement
Machine-readable contact
The same contact details are published as /.well-known/security.txt for scanners and tools.