Legal
Responsible Disclosure
Last updated November 7, 2026
Report a vulnerability
If you believe you have found a security issue, contact us through the Contact page with “Security” in the subject. Please include steps to reproduce.
Our promise
We will acknowledge your report promptly, keep you informed, and not pursue action against good-faith research that respects user privacy and avoids service disruption.
Out of scope
Denial-of-service testing, social engineering, and testing against accounts you do not own.