Security

Responsible person

Security officer: Taisuke Yamazaki

Scope

• The Sons Labo website (sons-labo.com)
• Apps, web services, and extensions listed on our Products page

Out of scope

• Issues in third-party services themselves, such as Google Play, the Chrome Web Store, LINE STORE, or Cloudflare (please report these to each service)
• Denial-of-service (DoS) attacks, or testing that sends large volumes of requests
• Testing that relies on deceiving people, such as phishing or impersonation
• Reports without a demonstrated impact, such as automated scanner output alone

What to include

• The target (URL, app name and version, device and OS)
• A description of the issue and its likely impact
• Steps to reproduce
• A link to screenshots or other materials, if any

Testing guidelines

• Test only in environments you control, such as your own accounts and devices
• Do not view, modify, or delete other users’ data. If your testing goes beyond what is needed to confirm the issue, stop there
• Do not run tests that disrupt our services
• Do not disclose the issue publicly until it has been fixed. Please contact us to agree on the timing of disclosure

How we respond

1. We will acknowledge your report within 5 business days
2. We will review the report and fix any confirmed issue, and we will keep you informed of our plan and the outcome
3. After the fix, we will notify users when necessary

We do not offer a bug bounty.

Established: October 8, 2026