Report a security vulnerability
How to report a security issue responsibly, what to include, what we ask you not to do, and how we handle the report.
Before you start
- Please do not test anything against other people's accounts, and do not access, change or delete data that is not yours.
- Tell us privately first, and give us a reasonable chance to fix it before saying anything publicly.
How to report
- 1Open a ticket from the help centre and choose "Security vulnerability".
- 2Describe the issue and how you found it, with steps we can follow.
- 3Include the address or screen it affects, and what an attacker could do with it.
- 4If you have a proof of concept, attach it in the ticket rather than sending it around.
- 5If you prefer email, send it to support@nertz.app with the subject "Security".
What we ask of you
- Work only against your own account and your own table.
- Do not use the issue to access, change, share or destroy anybody else's data.
- Do not run denial of service tests or automated scanning that could slow the game for players.
- Give us reasonable time to fix the issue before publishing anything about it.
- Keep the details private until it is fixed, then talk about it freely.
What we do
- We read every security report and reply with what we found and what we plan to do.
- We fix what needs fixing as quickly as the issue warrants, and we tell you when it is done.
- We credit researchers who would like to be named, when they are happy to be.
- We do not run a paid bug bounty programme, so we cannot promise a payment. We can promise that your report is read by a person and taken seriously.
If you think your account was accessed
- 1Reset your password straight away, and reset the password on the email account you use for Nertz! too.
- 2If you signed in with Google, review the apps with access to your account at myaccount.google.com and remove anything you do not recognise, then open a ticket so we can look at the account with you.
Was this helpful?
Related articles
Report a bug or a problem 1 minWhat to include when something in the game is broken, so we can reproduce it and fix it quickly.Safety & reportingReset a forgotten password 2 minHow to reset your Nertz! password with an emailed link, what to do if the email does not arrive, and how reset links expire.Account & sign-inHow to spot a fake Nertz message 2 minNertz! only ever emails from @nertz.app, never asks for passwords or payment, and never moves a conversation to another app.Safety & reporting
Where to go next
Still need help?
Tell us what happened and a person will read it. You will get a reference number, and the reply comes back in the same thread. If you would rather write from your own mailbox, support@nertz.app reaches the same place.