Skip to content

Security Disclosure

How to report a security vulnerability.

Reporting a vulnerability

If you find a security vulnerability, contact us through the contact details published on the site and in the file /.well-known/security.txt, describing the steps needed to reproduce it.

What we ask of you

  • Do not access, change or delete other people's data.
  • Do not run denial-of-service attacks or heavy automated scans.
  • Give us reasonable time to fix before public disclosure.

What we commit to

We will investigate and answer your report, and will not act against someone who acted in good faith within the above. This policy does not promise a financial reward.

All policies