Reporting a security problem

Email security@popit.media with what you found, where, the steps to show it, and what someone could do with it. Screenshots or a short video help.

This covers popit.media, chat.popit.media, pad.popit.media and admin.popit.media. If you find a problem on a website we built for a client, report it to us the same way and we will deal with it and tell the client.

While you look into a problem, please:

• only go as far as you need to show the problem exists;
• not look at, change, copy or delete anyone else's information, and stop and tell us straight away if you come across any;
• not slow the service down or knock it offline, and not send spam;
• not trick our people or break into anywhere physically; and
• give us a reasonable time to fix the problem, normally 90 days, before you tell anyone else about it.

We reply within five working days, keep you told as we fix the problem, and let you know when it is fixed.

If you have acted in good faith and within these rules, we will not take legal action against you or ask anyone else to, and we will thank you by name when we mention the fix, if you would like us to.

We are a small business and do not pay rewards for reports.

Services run by other companies, such as Cloudflare, Amazon Web Services and Google, have their own programmes for reports, so please send those problems to them.

Reports of spam, or of someone misusing our name, are welcome at the same address. How we protect personal information is in our privacy policy.