Responsible Disclosure

Use our Contact page and select Website / Technical Issue to report a suspected security problem. Start your message with “Security report” and include the affected page or feature, a short description, and a contact email. Avoid including sensitive information in the first message.

Describe the expected behaviour, what you observed, and the minimum steps needed to understand the issue. If a screenshot helps, redact personal information, authentication tokens, and payment data. Explain the potential impact using information already available to you; do not obtain additional private data to demonstrate the concern.

Do not access other users’ accounts or data, change or delete records, disrupt the service, send bulk requests, or use social engineering. Stop if you encounter personal information and report the issue without sharing that information further. This page does not grant permission for testing, guarantee a reward, or establish a bug-bounty programme. Contact us before any activity requiring authorisation.