At Dinobabyy, we are committed to maintaining the security of our website and protecting our customers’ information. If you believe you have discovered a security vulnerability on dinobabyy.com, please notify us immediately.

We take all legitimate security reports seriously and will investigate verified issues as quickly as possible.

Before submitting a report, please review the following guidelines.

SECTION 1 – CORE PRINCIPLES

Dinobabyy supports responsible security research and will not pursue legal action against researchers who act in good faith and follow the guidelines below.

We ask that you:

Allow Reasonable Time

Please allow us sufficient time to investigate and resolve the issue before publicly disclosing it.

Respect User Privacy

Do not access, download, modify, or disclose any personal information belonging to other users without their explicit permission.

Act in Good Faith

Do not disrupt our services, damage data, interfere with customers, or violate anyone’s privacy while testing.

Do Not Exploit the Vulnerability

Do not use the vulnerability to gain unauthorized access, retrieve sensitive information, or increase security risks.

Follow Applicable Laws

All testing must comply with applicable local, state, federal, and international laws.

SECTION 2 – RESPONSIBLE DISCLOSURE

Dinobabyy appreciates responsible security disclosures from researchers and customers.

To submit a valid vulnerability report, please:

Follow the Core Principles listed above.
Report genuine security vulnerabilities that may affect our systems or customer information.
Provide enough information for our team to reproduce and verify the issue.
Report the issue responsibly without attempting to exploit it further.

Please note: Submission of a vulnerability report does not guarantee financial compensation. Any rewards or acknowledgments are provided solely at our discretion.

SECTION 3 – NON-ELIGIBLE REPORTS

The following issues generally do not qualify as security vulnerabilities:

Spam, phishing, or social engineering reports unrelated to our infrastructure.
Missing SPF, DKIM, or DMARC records.
Clickjacking on non-sensitive pages.
Rate-limiting or brute-force concerns without a demonstrated security impact.
Denial-of-Service (DoS) attacks or stress testing.
Vulnerabilities requiring rooted or jailbroken devices.
Issues affecting outdated browsers, unsupported software, or browser extensions.