We do not offer a bug bounty or compensation. Do not access, modify, or exfiltrate data. Unauthorized testing may be unlawful.

See .well-known/security.txt for reporting procedures.