Help Us Keep BandWagon Safe
We welcome good-faith security, privacy and safety reports. BandWagon is designed around families and minors, so careful handling of sensitive information matters as much as fixing the bug itself.
Bug Bounty & Safe Harbor
Good-faith research performed to improve BandWagon security is welcome when it avoids harm, privacy invasion, service disruption, social engineering and access to data beyond what is necessary to demonstrate the issue. Eligible reports may receive a bounty or recognition based on severity, exploitability, impact, quality of the report and whether the issue was previously known. A bounty is not guaranteed until BandWagon accepts the report as eligible.
Do not publicly disclose an unresolved vulnerability or include real private information about users or minors in a public issue. Give us a reasonable opportunity to investigate and remediate first.
Sensitive Evidence
Do not paste passwords, tokens, one-time codes, identity documents, private information about minors, or other sensitive evidence into this form or ordinary email.
Use secret.harrisonward.com to send sensitive material, then paste only the secure-share reference/link below. The BandWagon report stores that reference, not the sensitive contents.