The/Security

Found a vulnerability? Write to us.

The editor runs locally and handles other people's files, so vulnerabilities in format parsing and in plugins are a priority for us. We accept reports at any stage.

how to report

Contact and what to attach.

address: security@talyh.com
response: acknowledgement of receipt
language: English or Russian

Build version and operating system
Reproduction steps and, if possible, a sample file
Which component is affected: core, format plugin, integration
Your disclosure terms, if you have any

what protects your data

Guarantees built into the core.

Atomic saving

The file is replaced whole: a crash or power cut during a write leaves no damaged document.

Unsaved changes kept

Unsaved text and Untitled documents come back after any exit, crash or restart.

External-change control

If the file changed on disk, the editor says so and leaves the choice to you.

Local operation

No cloud and no mandatory account: file contents never leave the device.

third-party components

We know what we are built from.

The uses external libraries — Qt, tree-sitter, RE2, libgit2 and others. Their list, versions and licences are published and available without registration; that is also what the LGPLv3 and GPLv3 licences require.

NoticesThe full list of third-party components and their licencesno JS

LGPLLGPLv3 compliance: sources and library replacement termsrequired

PrivacyWhat is collected, what is not, and how it is storeden · ru