Please report vulnerabilities privately through GitHub private vulnerability reporting. Do not publish exploit details, bearer credentials, identity files, or personal information in public issues.

For ordinary bugs and service problems, use Issues. Include the plugin version and a minimal description. Remove personal data from logs and screenshots.

The plugin runs with your desktop user's privileges. Local system awareness reads application and media activity; community participation sends only the documented public creature profile and social actions. The backend stores hashed authentication tokens. Community responses are validated before the UI consumes them.

This small community project has no guaranteed response time. Use the Community panel to block an unwanted participant or disconnect while a report is being investigated.