Security
How Linenote handles data and how to report a vulnerability or abuse.
Transport
The site and the API are served over TLS 1.2 or 1.3 only, with HSTS. Plain HTTP requests are redirected.
Data
Pastes are stored in a database that is not exposed to the internet and are deleted when they expire. Content is always served as text with a sandbox Content Security Policy.
Abuse
Pastes are limited in size and lifetime and are never rendered as web pages. Phishing, malware and personal data of third parties are removed when reported. Report abuse to abuse@sync.rooni.dev.
Reporting a vulnerability
Email security@sync.rooni.dev. We reply within two business days and do not take legal action against good-faith research. Contact details are also in security.txt.