Whitehat

Help us improve our security.

In this document, "we" or "our" refers to Athlete Manager, "you" refers to you and your account and "group" and "club" can be used interchangeably to mean any organisation or charitable cause that is associated with Special Olympics GB.


Discretion

  1. You accept that you will not disclose the issue to anyone else for at least 90 days.
    1. You may disclose sooner if we confirm that it is fixed and we agree that disclosure before 90 days is appropriate.

Data Access

  1. You accept that you will not access more data than is required.
  2. Once you have a proof of concept (document or code), email it to hello+security@athletemanager.co.uk.
  3. You will not attempt to access any data that could be reasonably assumed to be more sensitive.

    Payment

    1. You accept that you understand that there is no payment if you find something.
    2. For your work, we'd be happy to provide a reference on your behalf.