Security & Responsible Disclosure

The site is served over HTTPS with a strict Content Security Policy and modern security headers, including HSTS, frame protections, and a restrictive referrer policy.

We minimize client-side JavaScript, validate all input server-side, and store no unnecessary data.

If you believe you have found a security issue, email security@snowbros.studio with details and steps to reproduce. Please give us a reasonable window to respond before any public disclosure.

We will acknowledge your report, keep you updated, and credit you if you wish once the issue is resolved.

Testing must not harm users or data. No denial-of-service, no social engineering, and no automated scanning that degrades service for others.