Skip to content

Repository navigation

Security: sharebravery/tracememo

Security

SECURITY.md

Security Policy

Reporting Security Issues

If you discover a security vulnerability or privacy leak in TraceMemo:

  • Do NOT open a public issue or post sensitive exploit details or private data publicly.
  • Please report vulnerabilities through GitHub Private Vulnerability Reporting or GitHub Security Advisories.

Security Principles

  • No Private Keys: TraceMemo is a local-first research and note-taking notebook. It does not handle private keys, seed phrases, or wallet connections, and will never ask users for private keys or credentials.
  • Local-First: All user records remain solely on your local device (IndexedDB) without remote sync or external transmission.

There aren't any published security advisories