Statewide Sports Hub ("we", "us", or "our") takes the security of our users' data seriously. This Security Policy describes the measures we take to protect your information and how to report a potential security vulnerability.
1. Data Protection Measures
We protect your data using industry-standard practices, including:
- Authentication: Secure account management via Amazon Cognito, with hashed and salted password storage.
- Encryption: Data is encrypted in transit using TLS.
- Access Control: Strict, least-privilege access to production systems and data.
- Infrastructure: Hosting on Amazon Web Services (AWS) with managed security controls.
2. Responsible Disclosure
We appreciate the help of security researchers and the wider community in keeping our users safe. If you believe you have found a security vulnerability in our website or mobile application, we encourage you to report it to us.
When reporting, please include:
- A description of the vulnerability and its potential impact
- Steps to reproduce the issue
- Your contact information for follow-up
Please do not exploit a vulnerability beyond what is necessary to demonstrate it, and do not access or modify data that does not belong to you. We will acknowledge valid reports and work to resolve them as quickly as possible.
3. Report a Vulnerability
To report a security issue, contact us at:
Statewide Sports Hub
Email: statewidesportshub@gmail.com