http://snapwonders.i2p/vulnerability-disclosure-policy
Once you’ve established that a vulnerability exists or encounter any sensitive data (including personally identifiable information, financial information, or proprietary information or trade secrets of any party), you must stop your test, notify us immediately, and not disclose this data to anyone else. 4. Security research out of scope of this policy Our vulnerability disclosure policy does not cover: Clickjacking. Social engineering or phishing or vishing.