Reporting a security problem

Found a vulnerability in Crato? Write to security@crato.store with enough detail for us to reproduce it. We will confirm we have it within two working days, and tell you when it is fixed.

While you are testing

• Use your own accounts and your own data. Do not access, change or keep anything belonging to a creator or a buyer.
• Nothing that degrades the service for other people.
• Give us a reasonable chance to fix it before telling anyone else.

What we promise

We will not pursue you for testing in good faith under these terms, and we credit anyone who wants to be credited. We do not run a paid bounty.