Reporting
Send a comprehensible description, the address or feature affected, safe reproduction steps and the possible impact to officeSPAM-SCHUTZ-BITTE-ENTFERNEN@pock.biz. Mark the message as a confidential security report.
Safe testing
- Use only your own accounts and data; do not retrieve, change or publish other users' data.
- No social engineering, phishing, DDoS, spam or physical attacks.
- No persistence, malware or excessive automation; stop as soon as personal data or critical access becomes visible.
- Our customers' websites are not covered by this policy; only the systems of PrivacyAds may be tested.
- No publication before we have been able to investigate and remedy the issue appropriately.
How we handle reports
We acknowledge qualified reports, prioritise by risk, keep the reporter informed to a reasonable extent and take no legal action over good-faith, proportionate research within these rules. This does not create a claim to a bug bounty or a payment.
Not a vulnerability
Mere version notices without demonstrated impact, automated scanner reports without verification, missing general security headers without a concrete risk and social-engineering scenarios are regularly not considered a qualified report.