Security & Responsible Disclosure

How to report

Email details to security@mymystery.party including:

• Steps to reproduce
• Impact assessment (what could an attacker do?)
• Any suggested fix or mitigation
• Screenshots/recordings if helpful

Please don’t

• Publicly disclose issues before we’ve had time to respond
• Access other users’ data
• Run disruptive tests (e.g., DDoS, spam, brute force)

More detail

Our Terms of Service include additional beta-era security and disclosure notes in Appendix B.