# Clayside — box-league software for tennis clubs.
# Agentu Ltd (company no. 16191406), England and Wales.
#
# Found a security problem? Please tell us. We would much rather hear it from
# you than from a club. Report it privately to the address below and give us a
# reasonable chance to fix it before going public, and we will not come after
# you for having looked — no lawyers, no threats.
#
# Useful in a report: what you did, what happened, and why it matters. A club
# subdomain of your own to test against costs nothing: https://clayside.app/setup
#
# Please stay off other people's clubs. Every club is a separate database with
# real players' names in it, and testing against one is testing on people who
# did not agree to it. If a finding needs a second club to demonstrate, make a
# second one.
#
# Out of scope: anything needing physical access or a stolen inbox; reports
# generated by a scanner with nothing behind them; missing headers with no
# exploit attached; the box player link being shareable — that one is deliberate
# and documented in our privacy policy.

Contact: mailto:hello@clayside.app
Expires: 2027-07-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://clayside.app/.well-known/security.txt
Policy: https://clayside.app/terms#use