Found a security issue?

• What the issue is and where you found it (a page, an API address, a feature).
• Steps to reproduce it — exact clicks, requests or input.
• What it lets someone do that they shouldn't be able to (see another member's data, bypass a payment, act as someone else, and so on).
• Your contact details, so we can follow up or ask a question.

Anything on bildfie.com and its subdomains: the website, the member area, the admin area, and the mobile app's connection to our servers.

Real security issues — things like exposing another member's private data, bypassing payment or escrow checks, taking over an account, or running code we didn't intend. Not in scope: things that need physical access to someone's device, social engineering of our staff, or issues that only affect your own account (use Support for those instead).

• Give us a reasonable chance to fix it before telling anyone else or posting about it publicly.
• Don't access, change or delete real member data beyond what you need to show the issue exists.
• Don't run anything that could disrupt the platform for other people (no automated scanning at volume, no attempts to overload it).
• Test only with your own account — never someone else's, even if you think it would prove the point better.

In return: a good-faith report that follows this stays exactly that — good faith. We won't pursue legal action over a genuine, responsible report.