Security and responsible reporting

Protections

Account isolation, password hashing, expiring sessions, origin checks, restricted uploads, server-side quotas and private media access are implemented. HTTPS and encrypted backups require verified production setup. These measures do not constitute a security certification.

Report a vulnerability

Contact the verified support address. Describe a minimal reproduction without sending passwords, API keys or other users’ data. Do not access or change another user’s account.

Version 2026-10-03 · Longogi