Security & responsible disclosure
How to report a vulnerability in any Slatehouse product or website.
Reporting
Found a vulnerability in a Slatehouse product or this website? Email hello@slatehouse.app with "Security" in the subject. Please include reproduction steps and your timezone so we can coordinate.
Safe harbor
If you act in good faith, avoid privacy violations and data destruction, and don’t access data that isn’t yours, no legal action will be pursued for your research.
Response time
Reports are acknowledged within 2 business days. Critical issues are prioritized for a fix within 7 days.
Scope
Anything under *.slatehouse.app and published Slatehouse apps. Third-party services (Shopify itself, hosting infrastructure) are out of scope — please report those to the respective vendor.