Security
Security and Vulnerability Reporting
Effective: August 6, 2026. Last updated: October 14, 2026. Report suspected security problems through the studio contact channel.
Website security posture
This marketing site is a static Next.js export. It does not currently provide public accounts, form submission, payment processing, or a database. Its intentional telemetry is production-only Vercel Speed Insights for aggregate Web Vitals and Vercel Web Analytics for aggregate traffic and popular pages. Web Analytics uses a daily visitor hash. The site does not use advertising scripts, session recording, or cross-site profiles.
The deployment uses HTTPS and browser security headers. These choices reduce the site's attack surface but do not make the website or its providers risk-free.
Report a vulnerability
Send a good-faith security report to reedcreativelabs@gmail.com with the affected URL or product, reproduction steps, potential impact, and evidence that can be shared safely. Use the subject line Security Report when practical.
Do not access, alter, retain, or disclose other people's data; disrupt availability; use social engineering; or perform destructive testing. Allow a reasonable opportunity to investigate before public disclosure.
Scope and expectations
The public security contact covers this website and public Reed Creative Labs products. Reports about third-party platforms should normally use that provider's disclosure channel.
Submitting a report does not create a contract, guarantee a response time, or promise payment or a bug bounty.
