SelfMosaicReal-photo editor for photos that matter.

Security

Found a vulnerability? Report it here.

Report sensitive issues privately so exposed data, account-boundary mistakes, or suspicious paid-access behavior do not get posted in public.

Security reports go to security@selfmosaic.app. Do not include passwords, one-time codes, or full payment card numbers.

Use security for these

Use security for these

Use the security path if the issue could affect account trust, data boundaries, or paid access.

What to report

Security-sensitive issues

Use the security inbox for issues that could expose someone else's data, break account boundaries, or create suspicious paid access.

Account mix-up or cross-user access concernsUnexpected public or shared URLsSensitive data leakage in logs, screenshots, or diagnosticsSubscription abuse, impersonation, or suspicious account behavior

Reporting guidelines

What helps a private review move quickly

Keep the report private. Share the smallest safe reproduction. Do not send secrets or private data from other people.

Do not include passwords, Apple login codes, or payment card data.Share the smallest reproduction that still shows the issue.If you believe user data is exposed, email security first instead of posting publicly.Include screenshots only if they do not reveal other people's private data.