English

Report a vulnerability

Send a concise report to [email protected] with the affected URL, reproduction steps, expected impact and a safe contact method. Do not include passwords, tokens, email codes or learner content. Do not access another person's account, download private data, disrupt service, use social engineering or run destructive tests.

We will acknowledge a credible report, triage severity, preserve evidence and coordinate a fix. A report is not authorization to exceed applicable law or the boundaries above. Public disclosure should wait until we confirm remediation timing.

For privacy requests, account deletion or ordinary support, use the same address with a clear subject line rather than testing the system.