Security & Privacy
Nothing.gripe treats marketplace trust as a product requirement: public pages are discoverable, while administrative surfaces and sensitive operational documents use separate indexing and browser-security controls.
Public and private surfaces
The public website, marketplace information and task descriptions are intended to be discoverable. Administrative surfaces are separated from public content and are marked noindex through deployment headers.
Browser protections
The production configuration includes headers such as HSTS, X-Content-Type-Options, Referrer-Policy, X-Frame-Options and a Permissions-Policy. These controls reduce common browser-side attack and data-leak surfaces.
Payment and account information
Payment destinations, operational credentials and other non-public information should never be placed into public task proof or public page content. Review the Privacy and Terms pages for the governing details.
AI and crawler access
The site intentionally allows search engines and AI search crawlers to read public pages. This is separate from permission to access private/admin endpoints, which remain restricted.