Security
Security scope and reporting
Page last reviewed: August 28, 2026
Hipo Sheets does not provide customer accounts, accept uploads, collect payment details or process orders. HTTPS is enforced, and product checkout occurs only after a clearly labeled link opens an external service.
Responsible reports
If you believe a Hipo Sheets page has a security problem, first open a minimal public issue requesting a private follow-up channel. Do not publish exploit instructions, secrets, personal data or active attack details in the issue.
Request a security follow-up ↗
Out of scope
Hipobuy accounts, checkout, sellers, payments, orders, shipping and external listing content are not operated by Hipo Sheets. Report those issues to the relevant external service. General content errors belong on the contact and corrections page.
Automated testing
Do not run tests that degrade availability, access other people's data, send spam, damage systems or target third-party services. A responsible report should be reproducible with the minimum safe activity needed to demonstrate the issue.