Not a law firm. No legal advice, no attorney-client relationship — the published math, with its source.
LBTN

Security

Our security posture

The best defense for a site people use during an injury claim, a divorce, or a probate question is having nothing worth stealing. Legal by the Numbers is a pre-rendered static site: there is no account system, no login, no database of users, and no server-side storage of anything you type. Incomes, medical bills, parenting schedules, and assessed values are processed entirely in your browser and never leave your device.

  • All pages served over HTTPS with HSTS
  • Strict Content Security Policy and modern security headers (X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
  • Client-only architecture — calculator inputs are never transmitted or stored server-side
  • No authentication surface: no passwords, no sessions, no credentials to breach
  • Static hosting on a hardened CDN edge; no origin server to attack
  • Regular dependency updates and lockfile auditing

Our security headers target grade A on securityheaders.com.

Responsible disclosure

If you discover a security vulnerability, please disclose it responsibly. Email support.cosyslabs@gmail.com with the subject “Security Vulnerability” and enough detail to reproduce the issue. We will acknowledge within 72 hours and keep you informed as we fix it. Please do not test against real users or publicly disclose before we have had a reasonable chance to remediate.

Machine-readable contact details: /.well-known/security.txt