How to Report
Please send the steps to reproduce the issue, the affected pages, a description of the impact, and the minimum necessary evidence to Support@
SECURITY
Security Contacts and Disclosures
This page has been machine translated for convenience only. If there is any discrepancy between the Chinese, English and Italian versions, the Chinese version prevails.
This page is available in 17 languages: Chinese, Traditional Chinese, English, Italian, French, Canadian French, German, Spanish, Portuguese, Brazilian Portuguese, Polish, Russian, Japanese, Korean, Arabic, Hebrew and Turkish If the translation differs from the Chinese version, the Chinese version prevails.
We welcome responsible security reports and hope to mitigate verifiable risks as soon as possible.
Security Perimeter
We will review the report.
Do not access other users' accounts, export non-public data, conduct denial-of-service tests, send spam, or interfere with the experience of real users or the availability of the service. Use only your own test accounts and limit requests to the minimum necessary.
Our Commitment
- Acknowledge receipt within 2 business days;
- Provide a remediation plan or explanation within 30 days;
- After the issue is resolved and with your consent, you may be acknowledged on this page (anonymously if desired);
- Safe Harbor: As long as you comply with Section 3, we will not take legal action against you for good-faith testing and will make every effort to avoid legal proceedings.
Data Breach Notification
In the event of a data breach that may affect your rights and interests, we will, in accordance with the law, promptly notify affected users and regulatory authorities and explain the scope of the impact and the measures taken to address it.