We welcome responsible reports of security vulnerabilities affecting this website. Please read this policy before carrying out any testing or submitting a report.

How to report

Email the designated security contact with the affected page or service, a clear description of the issue and benign steps that allow it to be reproduced. Do not include unnecessary personal information or data obtained from other users.

Responsible testing

Do not break the law, access more data than is necessary to demonstrate the issue, alter or delete data, disrupt services, use destructive or high-intensity scanning, attempt denial of service, conduct social engineering or disclose the vulnerability publicly before it has been addressed.

What to expect

We will acknowledge a valid report and assess its severity and impact. Resolution time will depend on the nature and complexity of the issue. Please keep details confidential while we investigate and coordinate any public disclosure with us.

Safe handling of data

Protect any data obtained during legitimate research and delete it as soon as it is no longer needed. Do not share it with anyone else.