Security at Munda Field Planner
Honest summary for a pilot-stage product · Last updated 2026-06-12
Scope: this describes the invite-only private pilot/app and the controls that apply when accounts and uploads are enabled for pilot users. The public demo on this site has no accounts, no server uploads, no cloud-saved projects, and no billing — it runs entirely in your browser. Browser-local drafts are single-device only; uploads, cloud save, and crew-sharing are private-pilot features and are not active in the public demo.
Contractors will trust us with blueprints, jobsite locations, and project details. No software is "completely secure", so instead of promises we list what we do. The public demo is browser-only — no accounts, no server uploads, no cloud-saved projects, no live share links, and only optional single-device local drafts. The items below marked (private pilot) are controls for the invite-only app, and apply only when those features are enabled.
- (private pilot) Projects are private to your account; nothing you upload is publicly listed or indexed.
- (private pilot) Uploads will be restricted to PDF/PNG/JPEG/WebP, size-limited, validated by file contents (not just declared type), stored under random names outside the web root, and served only through controlled routes. Uploaded files are never executed.
- (private pilot) Crew share links use long random tokens, are excluded from search indexing, and can be revoked.
- All inputs are validated server-side; user text is escaped on render.
- Abuse-prone endpoints are rate-limited; lead forms carry anti-bot protections.
- Browser security headers (CSP, frame denial, content-type protections) are enforced.
- Secrets are kept out of the codebase; dependencies are audited.
- We collect the minimum data needed and run no ad tracking (see Privacy).
Reporting a vulnerability
Email fieldplanner@protonmail.com with details. We appreciate responsible disclosure and will respond as fast as a small team can — typically within a few business days.