Security at Tredless

Our Commitment

At Tredless, the security of our platform and the integrity of our content are paramount. We are committed to providing a safe and reliable environment for discovering new websites. This document outlines the key security practices we have implemented.

Content Curation & Safety

Our primary security feature is our human-centric approach. Unlike automated directories, every website featured on Tredless is subject to a manual review process.

  • Manual Approval: Every submission is reviewed by our team before it goes live. This process is designed to filter out malicious links, inappropriate content, and low-quality websites.
  • User Safety: By curating our content, we aim to provide a discovery experience where users can feel confident that the links they click have been vetted by a human.

Third-Party Services

We leverage trusted, industry-leading third-party services to enhance our platform's functionality and security:

  • Screenshot Generation (Microlink): We use the Microlink API to automatically generate screenshots of submitted websites. To protect your privacy, we only send the public domain name (e.g., "example.com") to this service.
  • Administrative Notifications (Telegram): We use the secure Telegram Bot API for internal notifications about new submissions. This data is transmitted over an encrypted connection to a private, access-controlled channel.

Vulnerability Reporting

No system is perfectly secure. If you believe you have found a security vulnerability in our Service, we encourage you to report it to us responsibly. Please contact our security team at official@tredless.com. We are committed to working with the community to verify and address any potential issues.