Responsible Disclosure Policy

We welcome reports about potential security vulnerabilities.

The following actions are strictly prohibited:

• Automated vulnerability scanning or fuzzing
• Brute-force attacks or credential stuffing
• Any form of exploitation of vulnerabilities
• Accessing, modifying or deleting data that does not belong to you
• Denial of service or stress testing

We do not currently operate any bug bounty program and no financial reward can be provided.

Reports must contain only theoretical descriptions and reproduction steps without any exploitation or access to real user data.

Any abusive behaviour may lead to legal action.