Security Policy
Found something that could put Opti or its users at risk? Please report it privately first so it can be fixed safely.
Last updated: 5 September 2026Reporting an issue
Email support@playopti.com and put “Security report” in the subject. Include the affected page or feature, what happened, the impact you think it has, and the smallest safe steps needed to reproduce it.
Do not send passwords, authentication cookies, private keys or another user’s personal information.
If you’re testing Opti
Only test accounts, devices and data you own or have clear permission to use. Do the least amount of testing needed to prove the issue exists. If you see another user’s private information, stop there and report it.
What is not allowed
Do not run denial-of-service tests, traffic flooding, phishing, social engineering, malware, destructive actions, physical attacks, or tests that access, change, delete or download another user’s data.
What happens after you report it
Good-faith reports will be reviewed and prioritized by likely impact. We may ask for more details or a safe proof of concept. Unless a bounty program is announced, a payment or reward is not guaranteed.
security.txt
Automated tools can also find our security contact at /.well-known/security.txt.