THE STUFFS COMPANY / TRUST
Trust Center / Responsible Disclosure
Help us address security issues safely.
We welcome good-faith reports about suspected security vulnerabilities in systems operated by The Stuffs Company. Please share only the minimum information needed to start a conversation.
Start with a safe contact
Email hello@thestuffs.company with the subject “Responsible Disclosure”. In your first message, identify the affected public product or page and provide a safe way to contact you. We will coordinate an appropriate channel before requesting technical details.
Protect people and data
Do not include passwords, access tokens, personal data, customer information, database contents, malware or exploit payloads in ordinary email. Do not access, modify, download or retain data that is not yours; do not disrupt services, perform social engineering, or test outside systems you are authorized to assess.
What to include later
After a coordinated channel is agreed, provide a concise description, affected URL or component, impact, and safe reproduction steps. Redact identifiers and use test accounts and data where possible.
Coordination
We will acknowledge the initial contact and work with the reporter to understand and validate the issue. Please allow a reasonable period for investigation and remediation before public disclosure. We will coordinate disclosure timing and attribution with you.
This process is not a bug bounty program and does not authorize testing that would otherwise be unlawful or harmful.