# FaceGUID — security contact
# https://faceguid.com/about

Contact: mailto:security@faceguid.com
Contact: https://faceguid.com/about
Expires: 2027-08-31T00:00:00.000Z
Preferred-Languages: en
Canonical: https://faceguid.com/.well-known/security.txt
Policy: https://faceguid.com/security
Acknowledgments: https://faceguid.com/about

# Good-faith security research is welcome and will not be met with legal
# threats. Please do not access, modify or delete data belonging to anyone but
# yourself — enrol your own face and test against that identity.
#
# Especially interested in: anything that recovers a face-derived key without
# the face, defeats the per-record or per-document reveal ceremony, mints a
# proof of human without a live ceremony, or lets a client_id send people to a
# domain it has not proved it controls.
#
# The full security model, including its known limits, is documented at
# https://faceguid.com/security