Security disclosure

Email info@tomoton.com with a clear description, the affected URL or component, steps to reproduce the issue, and its potential impact. Do not include personal or confidential data in your report unless strictly necessary; redact it wherever possible.

When investigating a possible issue, please:

• Test only this website and stop once you have confirmed the issue.
• Do not access, alter, download, or disclose data belonging to other people.
• Do not disrupt the website, use denial-of-service techniques, or use social engineering.
• Give TOMOTON GmbH a reasonable opportunity to assess and address the issue before public disclosure.

We will review reports in good faith and may contact you for clarification. This page does not promise a response time, reward, or immunity from legal claims. Any testing must remain lawful and within the limits above.