Public Review Draft — Not Yet Effective This document is published for public consultation and product-governance review. It does not yet govern the use of Langa Library and is not the final statement of Langa Library's legal or data practices. Product behavior, retention periods, vendors, and feature-specific disclosures remain subject to verification. Send comments to langalibrary.dev@gmail.com. Do not submit passwords, private book files, payment-card details, identity documents, or sensitive personal information.

Security & Responsible Disclosure Policy

We welcome good-faith reports that help protect readers, contributors, data, and infrastructure.

1. Reporting

Send vulnerabilities privately to langalibrary.team@gmail.com with the affected URL or component, clear reproduction steps, impact, relevant screenshots or logs, and safe contact information. Encrypt sensitive reports using Available on request from the security contact where available.

2. Good-faith research

Researchers should minimize access, use test accounts and their own data, avoid persistence, stop when personal data or secrets are exposed, avoid service disruption, and give us reasonable time to investigate before public disclosure.

3. Prohibited testing

Do not conduct denial-of-service, destructive testing, malware deployment, social engineering, physical intrusion, credential stuffing, privacy invasion, large-scale automated scanning that harms service, extortion, or access beyond what is needed to demonstrate the issue.

4. Data handling

Do not copy, alter, retain, or disclose personal data beyond the minimum necessary evidence. Tell us immediately and securely delete retained data after confirmation unless preservation is legally required.

5. Our response

We aim to acknowledge a valid report within 5 business days, triage severity, maintain reasonable communication, and coordinate disclosure. Timelines depend on complexity and risk.

6. Safe-harbor intent

Where a researcher acts in good faith and follows this Policy, Langa Library intends not to pursue legal action solely for the authorized research. This statement cannot bind third parties or excuse violations of law unrelated to the research.

7. Rewards

Langa Library does not currently guarantee a bug bounty. Any recognition or discretionary reward will be confirmed separately in writing.