Report a security or privacy issue

If your account is compromised right now

1. Reset your password immediately at Forgot password.
2. Open your profile and use Sign out everywhere — that kills every other session.
3. Then open a ticket at Urgent priority so we can check the account's IP history with you.

Reporting a vulnerability

Open a Anti-cheat & safety ticket, or email the address on our Privacy Policy, with:

• what you found and where,
• the steps to reproduce it,
• what an attacker could do with it.

Please give us a reasonable window to fix it before publishing. We do not run a paid bounty programme, but we do credit reporters who ask to be credited.

Do not include working credentials, tokens or other people's personal data in the report. Describe where they are instead — a support ticket is not a safe place to store them.