Security Disclosure Policy

At Toyzone, we take the security of our website and customer information seriously.
We value responsible disclosure and encourage security researchers to report potential vulnerabilities in a professional and ethical manner.

If you believe you have identified a security issue on toystorezon.com, please report it following the guidelines below.

Responsible Disclosure Guidelines

When reporting a security issue to Toyzone, we ask that you follow these principles:

  1. Provide us with reasonable time to investigate and resolve the reported issue before sharing any details publicly.

  2. Do not access, modify, or interact with private user accounts or personal data without explicit permission.

  3. Act in good faith to avoid privacy violations, data loss, service disruption, or degradation of our systems.

  4. Do not exploit any security issue for personal benefit, malicious purposes, or to demonstrate further impact.

  5. Comply with all applicable laws and regulations.

How to Report a Security Issue

Please include the following details when submitting a report:

  • A clear description of the issue

  • Steps to reproduce the vulnerability

  • Any relevant technical information or evidence

Reports should be sent to our official security contact:

Email: contact@toystorezon.com

Please do not contact individual employees directly.

Our Commitment

  • We review all valid security reports.

  • We prioritize issues based on potential risk and impact.

  • We aim to respond within a reasonable timeframe, depending on the complexity of the issue.

  • We may update this policy as our services evolve.

This policy is intended to promote responsible research and protect the security and privacy of our customers.