Responsible Disclosure
We appreciate reports of security vulnerabilities. If you believe you have found a security issue in YomiKamo, please use the Contact form to let us know. We aim to respond as soon as possible.
Guidelines
- Please report the issue privately through the Contact form. Do not post public details.
- Do not access or modify other users’ data.
- Do not perform denial-of-service testing, aggressive scanning, or automated exploitation.
- Provide clear steps to reproduce the issue and any relevant logs or screenshots.
Scope
This disclosure process applies to the YomiKamo website and related services. Third-party services (such as Google login) should be reported to their respective providers.
Safe Harbor
We consider good-faith security research and responsible disclosure to be authorized under this policy. We will not pursue legal action for good-faith testing that follows these guidelines.