Trust
Report security issues responsibly.
Reporting
Email [email protected] with reproducible steps, affected endpoints, impact, and a safe proof of concept. Do not access other people's data, degrade availability, use social engineering, or publish an unresolved issue.
What to expect
We aim to acknowledge a credible report within five working days, investigate proportionately, and coordinate disclosure. Please allow reasonable time for a fix. This policy does not authorize unlawful testing.
Controls
LifeTravel uses server-side authorization, verified signed webhooks, database-backed rate limits, encrypted uploaded files and backups, strict browser security headers, audit logging, and self-hosted error monitoring without default personal-data collection.