Skip to main content
The Decision Pattern

Responsible Disclosure

How to report a security issue, what to include, and how to test safely.

Last updated

How to Report

Email [email protected] with the details below. Remove passwords, payment details, and other people's personal information before sending.

  • The affected page or feature, including its web address.
  • The steps to reproduce the issue and what you observed.
  • The possible impact, with screenshots if helpful.

Safe Testing Expectations

Use your own account and data. Keep testing limited to what is needed to describe the issue.

  • Do not access, change, or delete information that belongs to someone else.
  • Do not interrupt the service or run tests that affect other customers.
  • Do not trick people into sharing access or attempt physical attacks.

Coordination

We review reports and acknowledge receipt. We may ask for more details to understand what happened.

Where appropriate, we coordinate a fix and the timing of public disclosure. Please contact us before publishing details so we can discuss next steps.