Please don't open a public issue for a security problem. Use Report a vulnerability on this repository's Security tab, or go straight to the private report form. Only you and our team can see the report.

Include as much of this as you can:

• The app version or source tag, for example source-desktop/v1.15.0
• Your platform: macOS, Windows, iOS, Android, or a build from source
• Steps to reproduce the problem
• What an attacker could do with it

We fix security issues in the latest release. If you build from source, check that the problem still happens on the newest source-desktop/* or source-mobile/* tag before you report it.

This repository holds the desktop and mobile client source only. For a problem with a hosted service, like your account, billing, or the website, contact support instead.

To see which hosted services the apps use and what data reaches them, read What runs on our servers.