Security & Vulnerability Disclosure
How accounts are protected and how to report a flaw safely.
Last updated 1 August 2026
Protections
Traffic is encrypted with TLS 1.3, passwords are stored using a memory-hard hash, optional two-factor authentication is available, and administrative access is least-privilege and logged.
Reporting a vulnerability
Email support@spin-hub.live with reproduction steps. Please avoid accessing other users' data, degrading the service, or disclosing publicly for 90 days. We acknowledge within 3 business days and will not pursue good-faith research.
Incident notification
If a breach is likely to affect your rights we notify you and the relevant supervisory authority within 72 hours of becoming aware.