The channel is live: it receives user enquiries, data subject requests, and vulnerability reports alike.
A single public channel
All enquiries go to [email protected]. There are no separate addresses for support, privacy, and security: the channel is shared, so state the nature of the request in the subject line.
| Type of enquiry | What to include |
|---|---|
| Support and product questions | what happened, on which page, and when |
| Data subject rights | the substance of the request; no sign-in required |
| Vulnerability report | reproduction steps that do not touch other people's data |
| Legal notices | sender details and the substance of the claim |
Data subject requests
A request does not require signing in: being unable to sign in must not block the enquiry. A response is provided within the period set by applicable law.
Identity is verified in a way that avoids collecting more than the response needs. A password or a complete exchange key is never requested.
Vulnerability reports
The same address is published in machine-readable form at /.well-known/security.txt in line with RFC 9116.
The presence of a channel is not permission for active testing. Please do not bypass access controls, scan other accounts, or extract data. Safe-harbour terms are not yet approved.
Service operator
The service operator will be named in this section before mass registration opens.