Security
Responsible Disclosure Policy
Responsible disclosure helps us protect our members, their privacy and the safety of the community.
Responsible Disclosure Policy
Scope
This policy applies to pineappleclub.nl (the marketing website) and app.pineappleclub.nl (the member platform, production environment).
Out of scope
Test and staging environments, third-party applications, social engineering, physical attacks, denial-of-service, spam/content injection, and vulnerabilities in third-party services fall outside this policy.
Ground rules
- Only use accounts that you legitimately own yourself.
- Stop immediately if an action could cause damage.
- Never access other people's data.
- Don't use automated tools without coordinating in advance.
- Keep your findings confidential until the issue has been resolved.
How to report
Send your report to contact@pineappleclub.nl with a description of the vulnerability, reproduction steps, the URLs involved, and your contact details.
What you can expect
- Within 2 business days: acknowledgement of receipt
- Within 10 business days: initial assessment
- Ongoing progress updates until the report is resolved
- Possible mention in our Hall of Fame
Safe harbor
We will not take legal action against researchers who comply with this policy for their authorised security research.
Rather ask AI? Ask your question about The Pineapple Club directly to: