This Responsible Disclosure & Vulnerability Policy applies to JRRobbins.com and the JR-branded website, community, media, messaging, games, store and related services. References to “JR”, “we”, “us” and “our” mean the operator of JRRobbins.com. These terms are intended to operate to the fullest extent permitted by applicable law and do not remove rights that cannot lawfully be excluded.

Authorised reporting

Security researchers should report suspected vulnerabilities privately through the published security contact and provide enough detail for JR to reproduce and remediate the issue.

Safe-harbour expectations

Good-faith research should minimise access to personal data, avoid persistence, avoid destructive testing, avoid service disruption and stop when sensitive information is encountered. This policy does not authorise denial-of-service testing, phishing, social engineering, credential attacks, physical intrusion, extortion or access beyond what is reasonably necessary to demonstrate the vulnerability.

Disclosure

Please allow reasonable time for remediation before public disclosure. JR may coordinate disclosure timing where active exploitation or user risk exists.

No bounty promise

This policy does not create a right to payment or a bug bounty unless JR separately offers one in writing.

View all Terms & Policies