Security Policy

Last Updated: June 29, 2026

1. Our Commitment to Security

At MooEarth.Live, the security of our platform and the protection of user data is a top priority. We utilize industry-standard practices and infrastructure to ensure that your experience checking live scores, news, and interacting with our 3D globe remains secure.

2. Infrastructure and Data Protection

  • Encryption in Transit: All data transferred between your browser and our servers is encrypted using HTTPS/TLS. We enforce strict HTTPS routing across the entire application.
  • Authentication: We use Google Sign-In via Firebase Authentication. We do not store, process, or manage your passwords directly. Your login credentials remain securely managed by Google.
  • Hosting: Our application is hosted on modern, secure cloud infrastructure (Vercel and Firebase), which provides built-in DDoS protection, automated patching, and secure edge networks.

3. User Best Practices

While we secure the platform on our end, we encourage you to follow security best practices:

  • Ensure your Google account (used for Sign-In) is protected with a strong password and Two-Factor Authentication (2FA).
  • Always access MooEarth.Live from trusted networks and devices.
  • Be cautious of phishing attempts. Official communications from us will only come from an `@mooearth.live` email address.

4. Responsible Vulnerability Disclosure

We appreciate the efforts of security researchers in keeping the internet safe. If you believe you have discovered a security vulnerability on MooEarth.Live, we ask that you follow these responsible disclosure guidelines:

  • Do not exploit the vulnerability beyond what is necessary to confirm its existence (e.g., do not download user data, alter configurations, or disrupt the service).
  • Keep it confidential: Please do not publicly disclose the vulnerability until we have had a reasonable amount of time to patch it.
  • Report it promptly: Send a detailed report, including steps to reproduce the issue, to security@mooearth.live.

5. Incident Response

In the highly unlikely event of a data breach or security incident that affects user data, we are committed to promptly notifying affected users and relevant authorities in accordance with applicable international data protection laws (such as GDPR).