# Creamy Slice security contact, RFC 9116.
# If you have found something, please tell us before telling anyone else.

Contact: mailto:hello@creamyslice.com
Expires: 2027-09-19T00:00:00.000Z
Preferred-Languages: en
Canonical: https://creamyslice.com/.well-known/security.txt

# Scope
# creamyslice.com is a static recipe site on Cloudflare Workers. The only
# endpoint that accepts input is POST /api/subscribe, which takes an email
# address. There are no user accounts, no logins, no payments and no personal
# data beyond newsletter addresses.

# Out of scope
# Reports of missing headers with no demonstrated impact, automated scanner
# output without a working proof of concept, denial of service, social
# engineering, and anything requiring physical access.

# Please do not
# Run automated scans that degrade the site for readers, or access data that is
# not yours. There is no bug bounty, only thanks and credit if you would like it.