Polski · English · Deutsch · Українська · Español

Security

Reporting a vulnerability

Contact: feedback@turysta.uk — also in /.well-known/security.txt (RFC 9116). Please practise responsible disclosure: give us time to fix the issue before publishing, and do not test against third-party installations.

Privacy

The app is static files — no backend, accounts, cookies or analytics. Your GPS position is processed only on your device and is never sent anywhere. Visit progress is stored only in your browser's localStorage.

Standard protections (Content-Security-Policy, security headers, no external scripts, locally hosted libraries) are configured in _headers and index.html.