Security
Os documentos jurídicos estão disponíveis em inglês.
Report a problem
Write to [email protected] with Security in the subject. Say what you found, how to see it again, and which address or page it concerns. We confirm we received it within three working days and tell you when it is fixed.
What we ask
Test only with your own account and your own orders. Do not open, change or keep anyone else's data, do not slow the service down or flood it with requests, and do not send messages to other people. Give us a reasonable time to fix a problem before you tell anyone else about it.
What we do in return
We look at every report, keep you informed, and do not take legal action against research done in good faith within these rules. We do not pay rewards for reports.
How the store is built
Card details are typed on Stripe's own payment page and never reach our servers. The administration pages sit behind Cloudflare Access. The site uses no advertising scripts and no tracking cookies; the one outside analytics service, PostHog, runs without cookies and never receives an address, an order link or anything typed into a form. Order links carry a secret that only the buyer receives.
Machine-readable contact
The same contact is published at /.well-known/security.txt.