# Security policy

Report suspected Lildra vulnerabilities privately to [support@napper.au](mailto:support@napper.au) with the subject **Lildra security report**.

Please include:

- the Lildra version and browser;
- the affected page type;
- clear reproduction steps; and
- the potential security or privacy impact.

Do not include passwords, authentication details, student records, or private lesson content. Use a minimal test case or redacted information where possible.

Please do not disclose a suspected vulnerability publicly before there has been a reasonable opportunity to investigate and respond.