LEGAL & PRIVACY
Security Reporting Policy
Effective
Send a suspected War Guardian vulnerability or personal data exposure to [email protected]. Include the affected feature, minimal reproduction steps and the approximate time. Use your own account and test information wherever possible.
Limits and handling
Do not access or download other people's records to prove an issue, disclose credentials, disrupt service, social engineer staff or continue exploiting an issue. Stop once you have enough information to report it. If you encounter personal information accidentally, avoid further access and describe its location without circulating the contents.
We review reports and coordinate containment and any required notifications. This policy does not promise a bounty, response time or blanket authorization to test systems. Request written authorization before security testing outside ordinary permitted use. It does not limit legally protected reporting or impose a nondisclosure condition on ordinary privacy complaints.