Security Policy
Effective Date: July 23, 2026
Last Updated: August 5, 2026
1. Our Commitment
Protecting our users and maintaining the integrity of Jackaroo are among our highest priorities.
While no online service can guarantee complete security, we are committed to implementing reasonable administrative, technical, and organizational safeguards designed to protect user accounts, personal information, and our infrastructure.
Security is an ongoing process, and we continuously review and improve our systems as the Service evolves.
2. Account Security
We encourage every user to help keep their account secure.
Users should:
- Choose a strong, unique password.
- Keep account credentials confidential.
- Never share passwords with anyone.
- Use a trusted device when signing in.
- Sign out of shared or public computers.
- Notify us immediately if unauthorized access is suspected.
You are responsible for maintaining the confidentiality of your account credentials.
3. Password Protection
Passwords are never stored in plain text.
Instead, passwords are stored using modern, industry-accepted password hashing algorithms with appropriate salting and security parameters.
We cannot recover your original password. If you forget it, you must reset it through the password recovery process.
4. Secure Communications
Where supported, communications between your device and the Service are encrypted using HTTPS (TLS).
Encryption helps protect information while it is transmitted across the Internet.
5. Access Controls
Access to administrative systems is limited to authorized individuals who require access to perform legitimate operational duties.
Administrative access is granted according to the principle of least privilege whenever practical.
6. Infrastructure Security
We employ reasonable measures to help protect the Service, including:
- Secure server configuration
- Authentication controls
- Access logging
- Security monitoring
- Software updates
- Backup procedures
- Abuse detection
- Fraud prevention measures
Specific implementation details are intentionally not disclosed.
7. Fair Play and Platform Integrity
Protecting the integrity of multiplayer competition is an important aspect of platform security.
We may use automated systems, manual review, statistical analysis, user reports, and other reasonable methods to detect:
- Cheating
- Automation
- Bots
- Fraud
- Unauthorized access
- Abuse of the Service
To protect these systems, we do not publicly disclose the methods, thresholds, or indicators used.
8. Responsible Vulnerability Disclosure
If you believe you have discovered a security vulnerability affecting Jackaroo, we encourage responsible disclosure.
Please provide, where possible:
- A description of the issue.
- Steps to reproduce the problem.
- The affected feature or page.
- Supporting screenshots or logs, if applicable.
- Your contact information.
Providing sufficient detail helps us investigate and address the issue more quickly.
9. Authorized Security Research
We appreciate good-faith security research.
However, unless we have provided prior written authorization, you may not:
- Perform penetration testing against our infrastructure.
- Conduct denial-of-service testing.
- Attempt to access data belonging to other users.
- Exploit vulnerabilities beyond what is reasonably necessary to demonstrate their existence.
- Modify or destroy data.
- Interfere with the availability of the Service.
Testing performed without authorization may violate our Terms of Service or applicable law.
10. Reporting Security Issues
Security reports should be submitted as soon as reasonably possible.
Please include enough information for us to investigate effectively.
We ask that you:
- Avoid public disclosure until the issue has been addressed or we have agreed on a disclosure timeline.
- Act in good faith.
- Avoid accessing data that does not belong to you.
- Avoid disrupting other users.
11. Security Updates
We regularly review and improve our security practices.
Security measures may change over time to address:
- New threats
- Changes in technology
- Infrastructure improvements
- Software updates
- Legal and regulatory requirements
Not all security improvements will be publicly announced.
12. No Warranty
While we work to maintain a secure platform, no system can be completely secure.
Accordingly, we cannot guarantee that unauthorized access, security incidents, or data breaches will never occur.
Users should also take reasonable precautions to protect their own devices and accounts.
13. Contact
If you wish to report a security vulnerability or have questions regarding this Security Policy, please use the Contact page on the Jackaroo website (/contact) or email [email protected].
Please include as much technical detail as you can so we can investigate promptly. Mark the subject as security-related when possible.
Thank you for helping keep Jackaroo secure for everyone.