Found something? Tell us quietly first

Security Policy

Last updated: October 1, 2026

We take the safety of your computer seriously, because Z Phase touches your files.

01Supported versions

Only the latest release receives security fixes. The built-in updater keeps you current.

02Reporting a vulnerability

Please do not open a public issue for security bugs. Use GitHub private vulnerability reporting and include steps to reproduce, the affected version and the impact. We aim to reply within 7 days.

03How the app is built

The renderer is isolated from Node.js through a context bridge (preload script). The database is local SQLite. All source code is public and auditable.

04Verify your download

Download only from the official Releases page. Each release lists a SHA-256 checksum you can compare with PowerShell: Get-FileHash .\Z-Phase-Setup.exe