Security disclosure

If you believe you found a vulnerability in Turnfeed, report it privately so it can be investigated without putting other people or their data at risk.

Email a security report General support

Security contact: support@turnfeedapp.com. Use the subject Turnfeed security report.

Report a vulnerability safely

Share only what is needed to reproduce and understand the issue.

What to include

The affected URL, route, or feature
Clear reproduction steps and expected impact
A minimal, non-destructive proof of concept
A safe way to contact you for follow-up

Keep the report safe

Do not send passwords, access tokens, private keys, or unrelated personal data
Do not retrieve, download, screenshot, or attach suspected child sexual abuse material or other exploitative material
Use a URL or Turnfeed identifier when sensitive content is involved

Research boundaries

Do not access, change, delete, or publish another person's data
Do not disrupt the service, run denial-of-service tests, spam, or social-engineer people
Stop as soon as you have enough evidence to explain the issue

Responsible disclosure

Keep the issue private while it is being investigated. The operator may ask for clarification or a safer reproduction. This page does not authorize access beyond your own account or ordinary public surfaces.

Technical disclosure details are available for security tools and researchers.