Version: 2026-09-28
How the service is protected
The published site is intended to require HTTPS. Editing and saving are local, and you control downloaded files. Printing requires an accepted model, confirmed roll and current image; an unknown physical outcome blocks retry until the device is checked.
The private operator panel is protected by Cloudflare Access, token verification, a session and CSRF protection for changes. An audit log records admin actions. These are specific controls, not ISO certification or a promise that incidents cannot happen.
What you can do locally
Download an editable label file if you want to return to a design. Protect files containing working photos, contact details or QR codes. Before showing a label, check that its QR code does not reveal a Wi-Fi password. After changing stock, select the roll size again and review the preview.
Report a vulnerability without exposing data
If you spot a security issue, use the contact form: https://fiedoruk.pl/#kontakt. Give a brief description, impact and minimal reproduction steps. Do not submit national ID numbers, passwords, keys, device addresses, complete private labels or someone else’s data.
Do not scan infrastructure, access others’ data or test devices without separate authorisation. Reporting does not establish a bug bounty or permission for active probing. We will acknowledge and assess a report; repair timing depends on the issue.
If an incident occurs
We first verify a report and limit its effects. If it involves personal data, we assess risk and follow notification duties toward the supervisory authority and affected people where required. The separate privacy notice describes data categories and contact.
Please avoid publishing exploit details before safe assessment; this is not a request to withhold information from authorities or a limit on legal rights.
Limits of assurance
We do not claim security certification, complete attack resistance or universal printer compatibility. Browser state, local copies and the physical device matter; this description may be updated after the deployment is checked.