Report a vulnerability

Found a security problem in bardstar.com? Thank you. Please tell us.

How to report

Email support@bardstar.com with the subject "Security report": what you found, where, and the steps to reproduce it. We reply within 3 business days and keep you updated until it is fixed.

Scope

bardstar.com and everything under it. Our clients' apps are not in scope: report those to their owners.

Good faith

If you act in good faith, avoid privacy violations, data destruction and service disruption, test only against your own accounts, and give us reasonable time to fix the issue before sharing it, we will not pursue or support legal action against you.

Please don't

• Run load tests, denial-of-service or spam.
• Access, change or delete other people's data.
• Use social engineering or physical attacks.

There is no bug bounty, but we will gladly credit you once the issue is fixed, if you want.