Security & Vulnerability Disclosure

Last updated: 3 June 2026

We take the security of Repeat Tools and our users’ data seriously. If you believe you have found a security vulnerability in our service (the web apps at repeat.tools and its subdomains, or the companion Figma plugin), we want to hear from you.

How to report

Email info@repeat.tools with the subject line “Security”. Please include:

• A description of the vulnerability and its potential impact.
• Steps to reproduce it (a proof of concept is welcome).
• The affected URL, app, or plugin version.

What to expect

• We aim to acknowledge your report within 5 business days.
• We will investigate and keep you updated on our progress.
• We aim to remediate confirmed critical issues promptly and will let you know when a fix is released.

Responsible disclosure

Please give us a reasonable opportunity to investigate and fix an issue before disclosing it publicly, and avoid accessing, modifying, or deleting other users’ data. Acting in good faith under this policy, we will not pursue legal action against you. We do not currently run a paid bug-bounty program, but we are grateful for responsible reports and are happy to credit you.

Contact

info@repeat.tools · see also /.well-known/security.txt