Skip to content
Winmau Autodarts
Play now

Vulnerability Disclosure Policy

Nodor International and its brands and affiliates, including Winmau, Red Dragon and Autodarts (“Nodor”), are committed to protecting the confidentiality of customer and employee personal information, the availability of our websites and information systems, and the security of our internet-connected devices. We build security into our platforms and connected products and comply with applicable IoT security requirements. This policy gives security researchers clear guidelines for vulnerability discovery and explains how to submit findings to us. We encourage you to report vulnerabilities in our websites, systems and products.

If you make a good faith effort to comply with this policy, we will consider your research authorized, solely to the extent it complies with all conditions of this policy and falls within the Scope below. We will work with you to understand and resolve reported issues quickly. Nodor will not recommend or pursue legal action related to your research, provided that you have not exceeded the scope of this policy, acted in bad faith, or violated any applicable law.

Nodor does not operate a bug bounty program and offers no reward or compensation for submitting potential security concerns or vulnerabilities.

Guidelines

Under this policy, “research” means activities in which you:

  • Notify us as soon as possible after you discover a real or potential security issue.
  • Make every effort to avoid privacy violations, degradation of user experience, disruption to production systems, and destruction or manipulation of data.
  • Use exploits only to the extent necessary to confirm the presence of a vulnerability.
  • Do not use an exploit to compromise or exfiltrate data, establish persistent, unauthorized access, or pivot to other systems.
  • Give us a reasonable amount of time to resolve the issue before you disclose it publicly.

If you establish that a vulnerability exists, or encounter sensitive data (including personally identifiable information, financial information, or proprietary information or trade secrets of any party), you must stop your test, notify us immediately, and not disclose the data to anyone else. You must permanently delete or destroy any such data in your possession as soon as practicable after notifying Nodor, and certify the destruction on request. You agree to keep all details of any discovered vulnerability confidential until Nodor has confirmed remediation or authorized public disclosure in writing.

Reporting a Vulnerability

Please email security@nodor-darts.com to report a vulnerability. To help us triage and prioritize, we recommend your report includes:

  • When the vulnerability or issue was identified
  • The system, product or service affected (for example, a Winmau or Red Dragon website, the Autodarts platform or app, or a connected device)
  • The steps needed to reproduce it
  • Any remediation suggestions

Nodor commits to acknowledging all submissions within 5 business days. For vulnerabilities in connected (IoT) products, including Autodarts-enabled devices, we will provide regular updates until the issue is resolved.

Scope

This policy covers all websites owned or licensed by Nodor, Winmau, Red Dragon and Autodarts; all internet-facing business systems; and internet-connected products and their associated mobile applications.

The following are out of scope:

  • Social engineering or phishing campaigns directed at Nodor, Winmau, Red Dragon or Autodarts employees
  • Denial of Service (DoS) attacks against our websites or business applications
  • Any other unauthorized activity intended for malicious purposes

Security Update Support Period

Nodor publishes a defined support period for each of its internet-connected products. This is the minimum period for which we will provide security updates.

Each product receives security updates for a minimum of five (5) years from the date it was first placed on the market. The end date for each product is shown below, on its product page, and in its product documentation.

Product First placed on market Security updates until
Autodarts X October 2026 October 2031

During the support period we will make security updates available for the product’s firmware, its associated mobile application, and the Autodarts services it depends on. Updates are provided free of charge.

We may extend a support period. We will not shorten one once published. When a support period ends, we will notify registered users in advance.