SixDots runs locally and does not use telemetry, remote services, or files outside the vault. Clipboard writes happen only after a copy action.

Report vulnerabilities through GitHub private vulnerability reporting. If that option is unavailable, open an issue asking for a private contact method without posting exploit details or vault contents. For editing bugs, include a small synthetic note and reproduction steps.

Security fixes target the latest published SixDots release. Do not attach personal notes, settings containing secrets, or payment details.