Found a security issue? We want to hear about it.
Email security@ our domain with a description, steps to reproduce and impact. Please do not access or modify other users' data, run denial-of-service tests or use social engineering.
We acknowledge reports within 5 working days, keep you informed, and will not take legal action against good-faith research that follows these rules. We do not currently run a paid bug bounty.