Report a security problem
If you find a weakness in Slide Practice, tell us privately and we will work with you to fix it. This page is our security policy.
How to report
Email us, with Security in the subject line.
Write to support@slidepractice.com. Say what you found, where, and the steps that show it, so we can see it for ourselves.
We reply within 5 business days, and we keep you told as we fix it.
What is in scope
The two sites we run.
- slidepractice.com, this website
- app.slidepractice.com, the app
What is out of scope
Please do not test these, and do not send them as reports.
- Denial of service, or anything that slows the service down for others
- Social engineering of our team or our customers
- Spam
- Services other companies run, including the providers listed on our service providers page. Report those to the company that runs them.
What we ask of you
Two things, so that nobody is harmed while a problem is open.
- Do not access, change or delete other people’s data. Use an account of your own, and stop once you have shown the problem.
- Give us 90 days to fix the problem before you tell anyone about it.
No legal action for good-faith research
We will not take legal action against research done in good faith that follows this policy.
If you are unsure whether something you plan to do follows it, ask us first.