# ChainHint security disclosure policy
# RFC 9116 — https://www.rfc-editor.org/rfc/rfc9116

Contact: https://chainhint.com/contact
Expires: 2027-04-16T00:00:00.000Z
Preferred-Languages: en, ru
Canonical: https://chainhint.com/.well-known/security.txt
Policy: https://chainhint.com/security
Acknowledgments: https://chainhint.com/security

# Reporting guidelines:
# - Use the contact form with subject "Security" or email legal@chainhint.com.
# - Please do not perform automated scanning that affects service availability.
# - Please do not access, modify, or destroy data belonging to other users.
# - We will acknowledge receipt within 72 hours.
# - We do not run a paid bug-bounty program at this stage but will publicly
#   credit researchers (with permission) for valid findings.