Security

How we protect the site

We keep the data we hold small, and protect it with:

• HTTPS on every page, with strict transport security.
• Security headers that block framing, content sniffing, and loading code from unknown sources.
• Rate limits and spam checks on the waitlist and sign-in forms.
• Access to stored data limited to the people who need it, behind password-protected, signed sessions.

Reporting a vulnerability

If you think you have found a security issue, email hello@genreach.io with the details and steps to reproduce it. Please give us reasonable time to fix it before sharing it publicly, and do not access other people’s data, disrupt the service, or run automated scans that degrade it.

We will acknowledge your report, keep you updated, and credit you if you would like. Our contact details are also published at /.well-known/security.txt.