Security
Last updated:
Reporting a vulnerability
Email security@erptwin.com with steps to reproduce. Please do not run denial-of-service tests or automated scanners against the live site. We will acknowledge reports promptly and will not pursue good-faith research that follows these rules. Machine-readable contact: security.txt.
How the site is built
- A static website: no accounts, passwords, forms, payments or database — so there is no personal data on our side to leak.
- Your learning data stays in your browser; imported files are checked before anything is saved and are always shown as plain text.
- HTTPS everywhere with HSTS, a strict Content-Security-Policy, and clickjacking protection.
- Every change is tested automatically (including security checks) before it is published, and earlier versions can be restored instantly.