Help keep our community safe.
Found a potential security issue? A careful, private report gives us the best chance to investigate and protect our customers.
Responsible disclosure, without a paid bounty.
We welcome good-faith vulnerability reports. We don’t currently operate a paid bug-bounty programme or promise rewards. This page does not grant permission to carry out intrusive testing.
Report a security issueStart with a summary. Ask for a suitable private channel before sending sensitive evidence.
Keep testing safe.
- Limit observations to public Purpify pages or accounts and data you control.
- Stop if you encounter another person’s data. Don’t download, change or share it.
- Don’t disrupt services, guess passwords, send phishing messages or run automated high-volume scans.
- Customer servers and third-party services, including payment providers, are outside this reporting scope.
- Get explicit written permission before any testing that could affect a service or another account.
What makes a useful report?
Include the affected URL, a clear description of the potential impact and the smallest safe steps needed to reproduce it. Add the time you observed it and redacted screenshots if useful. Never include passwords, session tokens or customer information.
Give us room to investigate.
Keep details private while we review the issue. We may ask follow-up questions and discuss a coordinated disclosure date. We cannot promise a fixed response or resolution time.
For gameplay issues, billing questions or a broken page without a security impact, use our ordinary support channel.
Contact support