How to report it
Write to contact@stoasquare.com. Please tell us:
- where it is: the address of the page, or the part of the app;
- what you did, step by step, so we can do it too;
- what you could see or do that you should not have.
Describe what you found, but do not send it. Never put another person's information, a password or a sign-in code in your message. If you saw someone else's information, tell us what kind it was and we will take it from there.
What you may test
You may look for problems in stoasquare.com, api.stoasquare.com and the StoaSquare apps for iPhone and Android, as long as you:
- use only your own account, or test accounts you made for this;
- never read, change, keep or delete anyone else's information. If you reach some by accident, stop there and tell us;
- do not slow StoaSquare down for others: no flooding, no load tests, and keep any automatic scanning slow;
- post nothing members would see beyond what you need to show the problem, and delete it afterwards;
- send no spam, and do not try to trick our members or our staff;
- keep the problem private until we tell you it is fixed, or for 90 days after you told us if it is not.
The companies we use, such as our hosting, network and email providers, are not ours to offer for testing. Please report a problem in their service to them.
What we promise
- If you follow these rules and tell us what you find in good faith, we will not take legal action against you for it, and we will not ask anyone else to.
- We will answer within 5 days to say we have your report, tell you what we are doing about it, and tell you when it is fixed.
- If you are not sure whether something is allowed, ask us first. We would rather answer a question than miss a problem.
We do not pay for reports.