01 / CORPORATE INFORMATION
Where to report
Email hello@vaarada.com with the subject “Responsible disclosure — Vaarada website”. Include the affected page or feature and a contact address for follow-up. Avoid placing sensitive details in public comments or social posts.
02 / CORPORATE INFORMATION
What makes a useful report
Describe what you observed, the conditions needed to reproduce it and the potential impact. Include a minimal example or redacted screenshot if it helps. State whether you encountered personal information, without attaching that information unnecessarily.
03 / CORPORATE INFORMATION
Keep the investigation limited
Use information you can legitimately access. Do not access other people’s accounts, download personal records, alter data, interrupt services, test third-party systems or use social engineering. This reporting route does not grant permission to perform intrusive testing.
04 / CORPORATE INFORMATION
How follow-up works
The team reviews the report, may request clarification and decides what investigation or remediation is appropriate. A report does not establish a payment, reward or public-recognition agreement. Any such arrangement would need separate written confirmation.
05 / CORPORATE INFORMATION
Protect the people involved
If personal information appears exposed, stop accessing it and explain the circumstances privately. Share only the minimum details required for assessment. Coordinate any public disclosure with the company rather than exposing personal data.