Vulnerability disclosure
We welcome reports from security researchers.
Last updated August 17, 2026
Reporting
Email team@tryopentag.com with the issue, its location, and reproduction steps. Give us a reasonable opportunity to fix it before public disclosure.
What to expect
- We acknowledge reports within five business days.
- We agree the disclosure timeline with you.
- We credit you when we publish the fix, unless you decline.
Safe harbour
We will not pursue legal action if you report in good faith, follow this policy, and give us a reasonable opportunity to respond.
Guidelines
Test only your own account and data. Do not access, modify, or retain anyone else's data, degrade the service, or run automated scans that put it under load. If testing would require any of that, describe the issue instead.
Scope
This policy covers OpenTag's hosted service and this website. Report third-party vulnerabilities to their providers, listed in our Trust Center.
Contact
Email team@tryopentag.com. For privacy questions, see our Privacy Policy.