The Lagrange Point Company · Version 2026-11-03

Security policy

This policy covers The Lagrange Point Company's website and apps.

Reporting a problem

Email support@lagrangeco.com with "Security" in the subject. Please include the website address or the app and its version (shown in the app's About screen), your browser or device, and the steps that show the problem. Don't send your own financial or personal data. We aim to reply within 7 days. We don't offer a bug bounty.

Out of scope

• Problems that need physical access to an unlocked device or browser profile.
• Self-XSS, such as pasting your own crafted data into an app.
• Denial-of-service or high-volume testing, and social engineering.
• Problems in services and libraries we use. Please report those to their owners, and tell us too.

Safe harbour

We won't pursue good-faith research that avoids privacy violations, data loss and service disruption, and that gives us reasonable time to fix a problem before it is made public.

Fixes

We fix confirmed problems in the latest version of the website or app. Only the latest version is supported.