SecureChat is committed to providing a secure and private platform for anonymous communication. This document outlines SecureChat's security measures, commitment to user privacy, and guidance for responsibly reporting vulnerabilities.

If you discover a security vulnerability, we appreciate your assistance in improving SecureChat. To responsibly disclose a vulnerability:

1. Private Disclosure:

   • Please open a private issue in the repository (if available) or contact the repository owner through GitHub’s messaging system.
   • Include a description of the vulnerability, steps to reproduce, and any potential impact. Screenshots or logs are also helpful if applicable.
   • Please avoid publicly disclosing the vulnerability until it has been addressed.

2. Response and Resolution:

   • Reports will be acknowledged promptly, and we aim to investigate all submissions within 5 business days.
   • Upon validation, we will work to resolve the issue as quickly as possible. Coordinated disclosure with the reporter will be arranged if public communication is needed.

3. Recognition:

   • If desired, contributors who identify valid vulnerabilities will receive recognition in the project’s changelog or release notes.

SecureChat is designed for anonymous, encrypted communication. Here are the core principles and features that make SecureChat unique:

• End-to-End Encryption: All messages are secured using AES-256 encryption, ensuring that only participants in the conversation can access their contents.
• Anonymity by Design: SecureChat requires no personal identifiers or user accounts, protecting user identity from the outset.
• Unique Room Codes: Rooms are accessible only through unique, randomly generated codes, allowing users to create private chat rooms securely.
• No Data Storage: SecureChat does not store user messages or metadata. Each session is private, and no chat history is retained.

We prioritize privacy and work to ensure that SecureChat remains a tool for confidential, secure, and anonymous conversations.

SecureChat is built with privacy as the primary focus. No personally identifiable information is required or stored, and we adhere to minimal data retention principles to protect user anonymity. Users are encouraged to use SecureChat within the terms outlined in the LICENSE for personal and non-commercial purposes only.

Thank you for supporting SecureChat and helping us ensure that it remains a secure and private space for anonymous communication.