Reporting a security problem

If you find a security problem in LoopHands, please tell us privately first so we can fix it before it is known widely.

How to report

Email security@loophands.cloud with what you found, the steps to reproduce it, the LoopHands version, and how it could be misused. Please do not include other people's data.

What happens next

• We confirm we received your report within 3 working days.
• We keep you informed while we investigate and fix it.
• We ask you to keep the details private for up to 90 days from your report, or until a fix is released if that is sooner. After that you may publish your findings.
• With your permission, we credit you in the release notes.

Please do

• Test only on your own PC and your own accounts.
• Stop and report as soon as you find a problem; do not go further than needed.
• Do not access, change or delete other people's data, and do not disrupt any service.

We will not take legal action against research done in good faith under these rules.