Security

Security is the product. If you find a weakness in Gow, please tell us before anyone else, and we will thank you for it. Report it to maletus1204@gmail.com with the subject "Security".

What to include

• What you found and where, and the steps to repeat it.
• What you think an attacker could do with it.
• How to reach you. We reply within 3 working days and keep you updated until it is fixed.

Rules, so we can work together

• Test only with your own account and your own devices. Never access, change or keep other people's data, and stop and tell us if you come across any.
• No denial-of-service, no mass scanning or automated flooding, no spam, no social engineering of our staff or customers, no physical attacks.
• Give us reasonable time to fix the problem before you publish anything.

If you follow these rules and act in good faith, we will not take legal action against you for your research. We cannot offer payment for reports, but we are glad to credit you if you want. This does not allow anything the law forbids.

What we do about security

Everything is encrypted in transit. Customers can only reach their own data. Repeated or abusive requests are slowed down and blocked, sign-ins are protected against guessing, and we keep no DNS query logs. You can read how we handle data in the Privacy Policy. No system is perfectly secure, and we do not claim ours is.