Send details through our Contact page using the subject "Security report". Include the affected page, steps to reproduce and potential impact.

Please act in good faith: do not access, change or delete other people's data, do not disrupt the service, and give us reasonable time to fix the issue before sharing it publicly.

Never send passwords, card numbers or other sensitive data in your report.