Skip to content

Security: claudneysessa/snakeia

Security

SECURITY.md

Security and privacy

Data handled by this project

SnakeAI has no server and no account. Everything the application stores stays in your browser:

What Where Cleared by
Collected gameplay examples localStorage Recomeçar do zero
Trained model weights IndexedDB Recomeçar do zero
Tunable parameters localStorage Voltar ao padrão

An example is a pair of eleven binary numbers plus one action index. It contains no personal data, no identifiers and no free text — only the state of a game board and the move made in it.

Nothing is uploaded to an application server by this project.

Third-party requests

TensorFlow.js is loaded from jsDelivr with a pinned version, both on the page and inside the training worker. That is the only outbound request the application makes, and it is required only for the training and inference phases — the game itself runs without it.

Supported version

Security fixes are applied to the latest version on the default branch.

Reporting a vulnerability

Please report suspected vulnerabilities privately through GitHub's private vulnerability reporting. Include reproduction steps, affected browsers and the potential impact. Avoid opening a public issue before the report has been reviewed.

There aren't any published security advisories