Responsible disclosure
Security Policy
Please report
- Account, auth, or session bugs.
- Privacy issues or unintended data exposure.
- API abuse, leaderboard manipulation, or launcher update issues.
Do not
- Attack production or disrupt game servers.
- Access other users' data.
- Publicly disclose before the report is handled.
Bounty
There is no paid bounty program. Valid responsible reports may receive credit in a future hall of fame.
Security hall of fame
No published credits yet