What to report
Security-sensitive issues
Use the security inbox for issues that could expose someone else's data, break account boundaries, or create suspicious paid access.
Security
Report sensitive issues privately so exposed data, account-boundary mistakes, or suspicious paid-access behavior do not get posted in public.
Security reports go to security@selfmosaic.app. Do not include passwords, one-time codes, or full payment card numbers.
Use security for these
Use the security path if the issue could affect account trust, data boundaries, or paid access.
What to report
Use the security inbox for issues that could expose someone else's data, break account boundaries, or create suspicious paid access.
Reporting guidelines
Keep the report private. Share the smallest safe reproduction. Do not send secrets or private data from other people.