Site information
Security reporting
Please report suspected vulnerabilities privately before public disclosure.
What to include
Describe the affected page or feature, the impact, and safe reproduction steps. Do not access other users' private data, disrupt service, or retain data beyond what is necessary to show the issue.
Sensitive information
Never send passwords, session cookies, recovery codes, private-message contents, or production secrets in a report. The operator may request a safer follow-up channel when needed.
Private contact
Effective 2026-09-22 · rules version v1.0.0-2026-09-22