If you have found a security issue in anything we ship, write to:

security@coffee-n-cannabis.com

If you want to encrypt it, write to info@coffee-n-cannabis.com first and we'll reply with a key.

• Acknowledge within 72 hours.
• Tell you when we expect to ship a fix.
• Credit you in the fix notes if you want credit.
• Not credit you if you don't.

• Give us a fair chance to ship the fix before you publish.
• Don't test against systems you don't own.
• Don't exfiltrate data that isn't yours.
• Don't threaten, don't extort, don't run a clock.