Security

Security basics for private football pools.

Koppa uses standard web application controls to protect pool access, user accounts, and tournament data.

Access

Authenticated players

Pool and prediction actions are tied to authenticated users and tenant domains.

Headers

Browser protections

The backend sends security headers for framing, content type, referrers, and permissions.

Reports

Responsible disclosure

Security issues can be reported through the published security contact.

For technical security details, use the security.txt contact published by this app.

Report an issue