Security
Found a weakness in Spotxt? Thank you for telling us first.
How to report
Write to support@spotxt.app with the subject "Security", the steps to reproduce, and what an attacker could do. We reply as soon as we can and keep you updated until it is fixed.
Please
Use only your own accounts and test numbers, do not read or change other people's data, do not overload the service, and give us a reasonable time to fix the issue before you publish it.
How we protect data
Everything travels over HTTPS. Sign-in is by a one-time code sent to your phone. The server never stores coordinates, and phone numbers from your contacts are matched as one-way hashes, never kept as a list.
Machine-readable contact
Our contact details are also at /.well-known/security.txt.