Security
Responsible Disclosure
Who looks after the security of Tourney Time Network's sites and communities, and how to tell us if you find a problem.
Who is responsible
Security at Tourney Time Network Ltd is run in-house. Our security lead is accountable for the systems we run, how they're protected and how we respond if something goes wrong.
How we protect it
A static site, no logins
This website is pre-built static pages served through Vercel and Cloudflare. There are no user accounts or passwords here to steal, and no server-side code an attacker can reach.
Your cookie choices
We use Vercel's cookieless analytics and Google Analytics. You can change your cookie choices at any time from "Cookie Preferences" in the footer, and the privacy policy explains what we collect.
Locked-down community bots
Bots in our Discord communities get only the permissions they need, never full administrator rights, and their tokens are kept out of source code.
Accounts protected
The accounts that run our sites, domains and communities are protected with multi-factor authentication.
Read our privacy policy.
Found a vulnerability?
If you think you've found a security issue in our websites, Discord bots or other systems, email [email protected] with:
- what you found and where (a page address, server or bot name);
- the steps to reproduce it;
- how we can get back to you.
We'll acknowledge your report within 5 working days and keep you updated while we fix it. Please don't access other people's data or accounts, disrupt our sites or communities, or share the issue publicly until we've had a chance to fix it. We don't run a paid bug bounty, but we're grateful for responsible reports.
Watch out for scams in our name
Our staff and moderators will never DM you asking for your password, a login code, or to "verify" your account on another website. If someone does, don't click anything: report them to the moderators in our Discord.