# Shieldz Payments — Security disclosure policy
Contact: mailto:security@shieldz.cash
Expires: 2027-06-25T23:46:01.383Z
Preferred-Languages: en
Canonical: https://shieldz.cash/.well-known/security.txt

# In scope:
#   - shieldz.cash (apex landing)
#   - merchant.shieldz.cash (merchant dashboard)
#   - all /pay/, /tip/, /donate/, /fund/ surfaces
#   - /api/v1/* and /api/admin/* HTTP endpoints
# Out of scope:
#   - 3rd-party services (LeoKit, NEAR, Chainflip, Relay) — please report
#     upstream and we will coordinate.

# PGP encryption key + a public policy page are coming. For now,
# please email plaintext or use age (https://age-encryption.org)
# and request a key fingerprint in your first message.