# Security

Budgie is a small project run by one person, so it really helps when problems are reported quietly.

**Found a vulnerability?** Please don't post it publicly or try it on other people's accounts.
Report it privately: on this repository's GitHub page, open **Security**, then **Report a
vulnerability**. Or contact the person who runs Budgie as described in the Terms of Use.

Please include what you found, how to reproduce it, and what someone could do with it. You'll
get an answer, and credit if you'd like it, once it's fixed.

Out of scope: anything that needs access to someone else's device, or flooding the server.