# Responsible disclosure for whatscene.in (RFC 9116).
# If you have found a vulnerability, please tell us before disclosing it
# publicly. We will acknowledge your report and keep you updated on the fix.

Contact: mailto:bezan@whatscene.in
Expires: 2027-07-30T00:00:00.000Z
Preferred-Languages: en
Canonical: https://whatscene.in/.well-known/security.txt
Policy: https://whatscene.in/privacy

# In scope: whatscene.in and the client dashboard at whatscene.in/dashboard.
# Out of scope: the hosted demo sites on *.hosted.app subdomains, which are
# deliberately inert demonstrations containing no real data.
#
# Please avoid automated scanning that degrades the service for other users,
# and never access, modify or retain data belonging to anyone else.