# Security Policy | MYOPL Source: https://myopl.net/security-policy/ Language: en Public reference excerpt. Consult the source page for complete context. Legal Security Policy Last updated: October 9, 2026 At MYOPL (operated by StreetLoc Inc.), security is a core pillar of our engineering and operational culture. We are committed to protecting the data, privacy, and infrastructure of all users—from recreational players to facility managers. This policy outlines our security standards, how we handle vulnerability disclosures, and the measures we take to safeguard your information. 1. Reporting a Vulnerability (Responsible Disclosure) We take the security of our platform seriously. If you are a security researcher or user who has discovered a vulnerability, we appreciate your help in disclosing it responsibly. Where to report: Please send details of any security issue directly to [redacted] or use the contact information in our security.txt. What to include: A clear description of the vulnerability and reproduction steps. Potential impact assessment. Your contact information for coordination. Our Commitment: We ask that you give us reasonable time (at least 90 days) to investigate and remediate the issue before making any public disclosures. We pledge not to take legal action against researchers who discover and report security issues in good faith and in compliance with this policy. 2. Infrastructure & Network Security MYOPL uses Cloudflare for public web delivery and Hetzner for backend hosting. Transport Layer Security (TLS): Our public websites and canonical API endpoints use HTTPS to protect data in transit. Edge Protection & Request Controls: Cloudflare provides the edge delivery layer for our public websites. Public MCP requests are subject to rate limits and input validation. Production Access: Access to production infrastructure is restricted to authorized operators. 3. Data Protection & Privacy We believe in data minimization—collecting only what is necessary to operate our platform and keeping it secure. Personal Access Controls: Personal MCP access requires authentication, user consent and authorization for the requested features. Access to premium AI features is also subject to AI package eligibility. Stat Management & Public Visibility: Published OPL ratings can be retrieved through public tools. Protected personal information is accessed through separately authenticated tools. Our Privacy Policy describes how information is collected, used and shared. No Third-Party Data Selling: We do not sell user data. We use PostHog for product analytics and event telemetry to improve product performance and user experience. Our Privacy Policy describes our analytics and data practices. 4. Application Security & AI Integrations Our AI integrations separate public reference tools from personal account access. Model Context Protocol (MCP) & APIs: Our public MCP at https://api.myopl.net/mcp provides read-only tools without account authentication. Personal MCP at https://api.myopl.net/mcp/personal requires a MYOPL account, OAuth consent and feature eligibility. Account-changing actions require confirmation. The public tool contract is published at https://myopl.net/openapi.json. The separate signed agent interface is documented at https://ai.myopl.net/.well-known/agent-card.json. Client Credentials: MYOPL’s native authentication service uses platform secure storage for saved credentials. Personal backend features require authenticated requests. 5. Third-Party Services & Subprocessors To deliver a seamless experience, we partner with trusted industry-standard infrastructure providers: Cloud & Edge: Cloudflare (DNS, SSL, Edge Caching, WAF) and Hetzner (Dedicated Server Hosting). Monetization & Subscriptions: RevenueCat, Apple App Store, and Google Play Console. Analytics: PostHog (Product event telemetry). Contact Us If you have questions, concerns, or feedback regarding our security practices, please reach out to us at: Email: [redacted] Corporate Address: StreetLoc Inc. / MYOPL, P.O. Box 3521, Jupiter, FL 33460 Related policies and resources Terms and Conditions Privacy Policy AI Terms security.txt ai.txt MYOPL AI resources