Security and Vulnerability Reports

How to report

If you think you found a security problem in Realmfront (the game on iOS, Android, Windows or the browser demo), please tell us:

• Email: info@maxdittmar.dev, subject "Security"
• Please describe the problem, the game version and platform, and how to reproduce it. Do not include personal data of others.

What happens next

• We confirm your report within five working days.
• We assess it, keep you informed and tell you when a fix is planned.
• We fix confirmed problems as fast as their severity requires and publish the fix through the stores. The update notes name the problem once the fix is out, and you, if you wish.
• Please give us up to 90 days before you publish details, less if the fix is out sooner. We will not take legal action against research done in good faith that respects this policy, avoids harm to players and does not access data that is not yours.

Scope

Realmfront plays offline and has no servers or accounts, so there is no online service to test. Its only connections are the store's update check and, in some regions, the store's age check. Support for each version follows the support period stated in the terms of use.