Reporting a security issue
Effective September 27, 2026
If you think you have found a security or privacy problem in LugNote, please tell us at security@lugnote.com. We read every report.
1. What to send
Describe the problem, the steps to reproduce it and what an attacker could do with it. Screenshots, requests and responses help. Please do not include other people's data.
We will acknowledge your report within three business days and keep you updated until it is fixed.
2. Testing guidelines
- Only test against accounts and households you own or have permission to use.
- Do not access, change or delete other people's data, and stop as soon as you reach data that is not yours.
- Do not run denial-of-service tests, send spam, or use automated scanners that generate heavy traffic.
- Do not use social engineering or physical attacks against our staff or providers.
We will not pursue legal action against anyone who reports a problem in good faith and follows these guidelines.
3. Disclosure
Give us a reasonable time to fix the problem before you share details publicly. We are happy to credit you once it is fixed, if you would like.