How we handle reports
- Tell us what you found, how to see it and what you think it affects. Please leave out anyone's personal data.
- We'll reply within 3 working days and keep you updated until it's fixed.
- Please give us fair time to fix it before you share it publicly. If you like, we'll thank you by name.
- Use only your own account. Don't access, change or delete other people's data.
- We won't take legal action against anyone who follows these rules in good faith.
This isn't a bounty programme, so we can't pay rewards.
Machine-readable contact details: /.well-known/security.txt