This project handles photos and face data of minors, so please report problems privately.

• Email codewithpom@gmail.com with a description and, if possible, steps to reproduce. Please do not open a public issue for a vulnerability.
• Do not access, copy or share any real student data while testing. The repository contains none; use the emulator and fabricated fixtures.
• You will get an acknowledgement within a few days.

In scope: gallery/firestore.rules, gallery/functions/**, the browser code in gallery/js/**, and the pipeline scripts. Known and documented limits (static image links, no rate limiting in Firestore rules) are listed in the README.