Security
Found a security vulnerability?
Thank you for reporting responsibly. We take reports seriously, investigate them and get back to you.
How to report
Write to this address
- What to include
Where the issue is, steps to reproduce it and its possible impact. A screenshot or short video helps.
- What not to do
Do not access other people's data, change or delete data, or run tests that slow the service down.
- Timeline
We reply within 3 business days and aim to fix the issue within 90 days. Please don't disclose it publicly before then.
- Thanks
If you like, we'll add your name to our thank-you list after the fix. We do not run a paid bounty programme.
For requests about personal data, use the contact routes in our Privacy Policy.