import Link from 'next/link' import {Col} from 'web/components/layout/col' import {Row} from 'web/components/layout/row' import {PageBase} from 'web/components/page-base' import {SEO} from 'web/components/SEO' import {useT} from 'web/lib/locale' export default function SecurityPage() { const t = useT() const email = 'hello@compassmeet.com' const mailto = `mailto:${email}?subject=${encodeURIComponent('Security vulnerability report')}` return (

{t('security.title', 'Security')}

{t( 'security.intro', 'We take the security of our community seriously. If you believe you have found a vulnerability or security issue, please report it responsibly so we can investigate and fix it quickly.', )}

{t('security.how.title', 'How to report')}

{t( 'security.how.text', 'Please do not open public GitHub issues for security reports. Instead, contact us directly via one of the following:', )}

  • {t('security.how.contact_prefix', 'Use the ')} {t('security.how.contact_form', 'contact form')} {t('security.how.contact_suffix', ' and choose the security category if available.')}
  • {t('security.how.email_prefix', 'Email us at ')} {email}.

{t('security.include.title', 'What to include')}

{t( 'security.include.text', 'To help us triage and resolve the issue quickly, please include:', )}

  • {t('security.include.item1', 'A clear description of the issue and potential impact')}
  • {t( 'security.include.item2', 'Steps to reproduce (URLs, test accounts, exact requests/responses if applicable)', )}
  • {t('security.include.item3', 'Any screenshots, videos, or proof-of-concept code')}
  • {t( 'security.include.item4', 'Your operating system, browser, and environment details', )}

{t('security.response.title', 'Our response')}

{t( 'security.response.text', 'We aim to acknowledge new security reports within a few business days and will keep you updated as we investigate and remediate. Timeframes may vary based on severity and complexity.', )}

{t('security.scope.title', 'Out of scope')}

{t( 'security.scope.text', 'Please avoid tests that could degrade service for other users (e.g., denial of service) or that involve accessing another user’s data without explicit permission.', )}

{t('security.contact.title', 'Get in touch')}

{t('security.contact.form', 'Contact form')} {t('security.contact.email_button', 'Email')} {email}
) }