If you discover a security vulnerability in HydroGrid, please report it responsibly.

Do not open a public issue for security vulnerabilities.

Instead, please email us at mdsadat@ualberta.ca with:

• A description of the vulnerability
• Steps to reproduce it
• Potential impact
• Any suggested fixes (optional)

We will acknowledge receipt within 48 hours and aim to provide a fix or response within 7 days.

This security policy covers:

• The HydroGrid web application
• Any API integrations and data handling
• Authentication or data storage mechanisms (if applicable)

HydroGrid is a client-side application that fetches data from public APIs. We do not store user data or credentials. However, we still take security seriously and appreciate responsible disclosure of any issues.