Security disclosure

If you believe you found a vulnerability in Turnfeed, report it privately so the operator can investigate without putting other people or their data at risk.

Email a security report General support security.txt

Security contact: support@turnfeedapp.com. Use the subject Turnfeed security report.

What to include

The affected URL, route, or feature
Clear reproduction steps and expected impact
A minimal, non-destructive proof of concept
A safe way to contact you for follow-up

Keep the report safe

Do not send passwords, access tokens, private keys, or unrelated personal data
Do not download, screenshot, or attach exploitative or child-safety material
Use a URL or Turnfeed identifier when sensitive content is involved

Research boundaries

Do not access, change, delete, or publish another person's data
Do not disrupt the service, run denial-of-service tests, spam, or social-engineer people
Stop as soon as you have enough evidence to explain the issue

Responsible disclosure

Keep the issue private while it is being investigated. The operator may ask for clarification or a safer reproduction. This page does not authorize access beyond your own account or ordinary public surfaces.