Report a vulnerability
We take the security of WipePic seriously. If you find a problem, tell us. We respond fast, we fix fast, and we credit the people who help us.
Report privately
Email [email protected] with the details. Do not publish the problem before we fix it.
Fast response
We confirm your report within 3 business days and keep you updated until the fix is live.
Credit
With your permission, we thank you by name on this page after the fix.
How to report
Send an email to [email protected]. Include:
- The address of the affected page or feature.
- The steps to reproduce the problem.
- What an attacker could do with it.
- Your name or handle, if you want credit.
In scope
- The WipePic website and its pages.
- The metadata engine, for example metadata that WipePic should remove but does not remove.
Out of scope
- Denial-of-service attacks and spam.
- Social engineering of our staff or users.
- Reports from automated scanners without a working proof.
Safe harbor
If you act in good faith, follow this policy and do not access or change other users' data, we will not take legal action against you.
Machine-readable contact
Our contact details are also in /.well-known/security.txt, as defined in RFC 9116.