Security

Mio Path cares about the security of our players, our app and our website. If you believe you have found a security issue in Mio Path, miopath.com or one of our public services, please report it to security@miopath.com.

What to report

Please contact us if you find a vulnerability such as:

• Account, authentication or authorization problems.
• Access to another user’s private data.
• A way to modify game progress, purchases, rewards or leaderboard data without permission.
• A problem in invite links, website routing or public pages that could expose data.
• A security issue in our Firebase, Cloudflare or app configuration.
• A vulnerability that could affect the availability, integrity or confidentiality of Mio Path.

For privacy questions, use privacy@miopath.com. For gameplay or purchase help, use support@miopath.com.

How to report

Email security@miopath.com with:

• A clear description of the issue.
• Steps to reproduce it.
• The platform involved, such as iOS, Android or web.
• Any affected URL, screen, account state or app version.
• Screenshots, logs or proof of concept details if they help us understand the issue.

Please do not include another person’s personal data unless it is necessary to explain the problem.

Safe testing

When researching or reporting a potential issue, please:

• Use your own account and test data where possible.
• Avoid accessing, changing or deleting data that is not yours.
• Avoid interrupting the service for other users.
• Avoid automated high-volume scans, denial of service tests, spam, social engineering or physical attacks.
• Stop testing and contact us if you accidentally access data that is not yours.

We are a small team, so we do not run a paid bug bounty program at this time. We still appreciate responsible reports and will credit reporters when appropriate and when they want to be named.

What happens next

We aim to acknowledge security reports within a few business days. We will investigate, prioritize the issue and work on a fix based on severity and impact. We may ask for more information if we need help reproducing the problem.

Please give us reasonable time to fix the issue before sharing details publicly.

Contact

Security reports: security@miopath.com

Privacy requests: privacy@miopath.com

Support: support@miopath.com