Security Reporting

If you believe you found a security issue

Email [email protected] with enough information for us to understand and reproduce the issue. Do not include more personal or child information than is necessary.

Please do

• Act in good faith and avoid privacy harm.
• Stop testing if you encounter personal information you are not authorized to access.
• Give us a reasonable opportunity to investigate before making a vulnerability public.
• Use your own account and data where testing is necessary.

Please do not

• Access, download, alter or disclose child information without authorization.
• Use social engineering, phishing, credential theft or physical attacks.
• Disrupt the service, send malware or intentionally degrade availability.
• Demand payment or threaten disclosure as a condition of reporting.

Our response

We will review good-faith reports, prioritize issues according to risk and communicate with the reporter where appropriate. This page does not create a bug-bounty payment obligation.