Legal
Security Policy
Updated
We take the security of Nomad Life and of your data seriously. If you found a weakness, please tell us privately first, so we can fix it before anyone misuses it.
How to report
Write to [email protected] with "Security" in the subject. Please include:
- what the problem is and where (the page or address),
- the steps to reproduce it,
- what someone could do with it,
- how we can reach you, if not by the address you write from.
We confirm that we received your report within a few working days, keep you informed while we fix it, and tell you when it is fixed.
While you look
- Use only your own accounts. Never open, change or delete other people's data; if you reach some by accident, stop, do not keep it, and tell us.
- No denial of service, load testing, spam or automated scanning that slows the service down for others.
- No social engineering of our team or users, and no attempts on our providers (Hetzner, Cloudflare, Stripe, Google, Hostinger).
- Give us a reasonable time to fix the problem before you publish anything about it.
Our promise
If you follow these rules and act in good faith, we will not take legal action against you for your research, and we will not report you to the authorities. If you like, we thank you by name once the problem is fixed.
Scope
This covers nomadlife.pro and the Nomad Life app. Payments are handled by Stripe: report problems with Stripe's own pages to Stripe. We do not run a paid bug bounty.
Machine readable contact details are at /.well-known/security.txt.
Who we are
Nomad Life is run by Nemax Tech LLC, Sofia, Bulgaria. Company number (UIC) 207405380, VAT number BG207405380. Write to [email protected], or about your account to [email protected].