RESPONSIBLE DISCLOSURE, jcooperkai.com
======================================

Last updated: September 30, 2026

SCOPE

This policy covers the website and files served from jcooperkai.com and
www.jcooperkai.com. Linked third-party services (GitHub, X, Webbify) are
outside its scope.

HOW TO REPORT

Email jcooperkai@gmail.com with the subject "Security report". Include the
affected URL, steps to reproduce, the impact you observed, and any screenshots
or request details. Do not include another person's private data.

GOOD-FAITH TESTING

Please:

- stop once you have shown the minimum impact needed;
- avoid denial of service, traffic floods, destructive testing, social
  engineering, physical attacks and scanning that harms availability;
- do not access, change, download, keep or share data that is not yours;
- give me reasonable time to fix the issue before publishing details.

If your research follows this policy in good faith, I will not take legal
action over it. This policy does not authorize testing third-party
infrastructure and is not a bug bounty.

HOW THE SITE IS BUILT

The site is read-only. It has no accounts, database, upload endpoint, chat or
public API that changes state. It accepts GET and HEAD requests only.