Security
Reporting a security issue.
If you've found a vulnerability in Citeless or citeless.com, email [email protected] with "Security" in the subject. Tell us what you found, where, and the steps to reproduce it. Please don't include anyone else's personal data.
What's covered
- The Citeless iPhone app
- citeless.com, including the waitlist form
Citeless has no servers of its own: tickets, photos and letters stay on your phone, and the only thing the website stores is the waitlist's email addresses. Services we use but don't run, such as Apple and Cloudflare, have their own reporting programs.
What we ask
- Test only on your own devices and with your own tickets.
- Don't run tests that degrade the site for other people, such as load or denial-of-service tests, and don't flood the waitlist.
- Give us a reasonable chance to fix the issue before you share it publicly.
What happens next
A person reads every report. We'll confirm we've received it, keep you posted while we work on it, and tell you when it's fixed.