Security

We take the security of Brier and its users' data seriously. If you have found a vulnerability, we want to hear about it.

Reporting a vulnerability

Email contact@brier.live with a description of the issue and steps to reproduce it. Please give us a reasonable time to investigate and fix the problem before disclosing it publicly.

Please do

• Test only against your own account and data.
• Report as soon as you can after finding an issue.
• Give us enough detail to reproduce it.

Please don't

• Access, modify, or delete other users' data.
• Run denial-of-service tests, spam, or automated scanning that degrades the service.
• Use social engineering against us or other users.

Good-faith research

We will not pursue action against researchers who follow this policy, act in good faith, and avoid privacy violations and service disruption. There is no paid bug bounty at this time.