# Security contact for sendtoshop.com (RFC 9116).
#
# This file lives at /.well-known/security.txt; the copy at /security.txt is
# there because scanners still look at the root first. Keep the two identical.
#
# Expires is required by the RFC, and a file past it is ignored. The e2e suite
# (e2e/marketing.spec.ts) fails once it is inside 30 days, so move it on a year
# in both copies before then.
#
# Report anything about sendtoshop.com, app.sendtoshop.com, admin.sendtoshop.com,
# api.sendtoshop.com or the Shop app. Please do not test with real shops'
# accounts or send real customers' files; a free account of your own is enough.
# We answer within 3 working days, fix confirmed problems before talking about
# them, and credit you if you wish. No bug bounty.
Contact: mailto:support@sendtoshop.com
Contact: https://sendtoshop.com/about
Expires: 2027-10-06T00:00:00.000Z
Preferred-Languages: en
Canonical: https://sendtoshop.com/.well-known/security.txt
Policy: https://sendtoshop.com/legal/terms