Reporting route
Email [email protected] with the affected URL or component, the likely impact, clear reproduction steps and only the evidence needed to verify the issue.
Safe testing boundaries
Do not access another person's data, disrupt an emergency search, test third-party workshops, send spam, use social engineering or retain personal information. Stop as soon as you have enough evidence to describe the issue safely.
What happens next
We will acknowledge a credible report, assess severity and agree a communication route. This process is not a promise of a bounty or a legal safe harbour.
For ordinary account, listing or privacy matters, use the contact form instead.