Security

Draft under review. This text is being checked by a lawyer and may change before Learn Vedic Math is launched.

How we keep Learn Vedic Math and the little information it handles safe.

• Every page is served over HTTPS only, with strict security headers: a Content-Security-Policy that allows only the hosts the site needs, no framing by other sites, and powerful browser features such as the camera turned off unless a game asks for them.
• Every file the game loads is served by this site and checked against a fingerprint, so a file cannot be swapped without us noticing. Nothing loads from Google or YouTube until a Player chooses a video or a World board.
• World board posts are checked by security rules on the server: only the expected fields, only from this site, and entries delete themselves after 30 days.
• Every account behind the site uses a hardware key or a passkey, deploys are made by an automated pipeline with narrowly scoped keys, and dependencies are scanned for known problems.
• We review the security reports the site collects every month, and our written security program once a year.

Report a problem

If you find a security problem, write to security@learnvedicmath.com. Please give us a chance to fix it before telling others, and do not access anyone else's information while testing. Our contact details are also in security.txt.