Meta tags:
description=How to report a security problem in Atelier, and what to expect when you do.;

Headings (most frequently used words):

of, what, is, bounds, security, the, short, version, reporting, problem, our, side, it, in, out, things, we, already, know, no, bounty,

Text of the page (most frequently used words):
and (17), you (17), not (10), will (9), are (8), that (7), the (7), our (7), atelier (6), what (6), #security (5), tell (5), privacy (3), service (3), for (3), bounty (3), say (3), rather (3), than (3), anyone (3), else (3), description (3), out (3), bounds (3), your (3), write (3), within (3), 2026 (2), policy (2), reports (2), two (2), people (2), have (2), credit (2), things (2), look (2), like (2), sit (2), but (2), one (2), these (2), other (2), report (2), enough (2), against (2), would (2), there (2), side (2), good (2), faith (2), after (2), was (2), publicly (2), going (2), days (2), think (2), problem (2), found (2), something (2), atelierjournal (2), com (2), journals, llc, home, consumer, health, data, cookies, tracking, terms, pay, built, yet, scale, can, fund, programme, changes, here, meantime, thanks, fast, honest, reply, some, flaws, deliberate, trade, offs, made, with, eyes, open, uploaded, images, addresses, cannot, guessed, individually, access, checked, which, described, plan, limits, pricing, boundary, welcome, new, already, know, google, stripe, mapbox, providers, their, programmes, theirs, them, directly, automated, scanning, heavy, attack, social, engineering, phishing, physical, attempts, connected, denial, load, testing, anything, degrades, accessing, changing, downloading, content, flaw, let, stop, proof, reading, client, code, ships, browser, looking, fair, accounts, control, make, own, test, account, invite, codes, limited, need, website, app, public, endpoints, name, want, leave, don, research, set, below, pursue, legal, action, ask, someone, comes, work, clearly, authorised, please, give, reasonable, chance, fix, before, describing, specify, number, then, hide, behind, talk, acknowledge, five, working, when, fixed, disagree, explain, why, quiet, roughly, how, reproduce, impact, rough, beats, because, polished, reporting, money, person, team, waste, time, come, email, short, version, effective, september,

Text of the page (random words):
security atelier atelier atelier security effective 9 september 2026 the short version found something email security atelierjournal com report it in good faith and we will not come after you there is no bounty money we are a two person team and we would rather say so than waste your time reporting a problem write to security atelierjournal com tell us what you found roughly how to reproduce it and what you think the impact is a rough description beats no description do not sit on something because the write up is not polished we will acknowledge you within five working days tell you what we think and tell you when it is fixed if we disagree that it is a problem we will explain why rather than going quiet please give us a reasonable chance to fix it before describing it publicly we are not going to specify a number of days and then hide behind it talk to us our side of it if you research in good faith and within what is set out below we will not pursue legal action against you and we will not ask anyone else to if someone else comes after you for work that was clearly within these bounds tell us and we will say publicly that it was authorised we will credit you by name if you want it and leave you out of it if you don t what is in bounds the atelier website and app and our public endpoints accounts you control make your own test account invite codes are limited so write to us if you need one reading our client side code it ships to your browser looking at it is fair what is out of bounds accessing changing or downloading anyone else s content if a flaw would let you stop there and tell us a description is proof enough denial of service load testing or anything that degrades the service for other people social engineering phishing or physical attempts against us or anyone connected to us automated scanning heavy enough to look like an attack google stripe mapbox and our other providers their programmes are theirs report to them directly things we already know some things look like flaws and are deliberate trade offs we have made with our eyes open uploaded images sit at addresses that cannot be guessed but are not individually access checked which is described in the privacy policy plan limits are a pricing boundary rather than a security one reports on these are welcome but will not be new to us no bounty we do not pay for reports atelier is built by two people and is not yet at a scale that can fund a bounty programme if that changes we will say so here in the meantime you have our thanks our credit and a fast honest reply privacy policy terms of service cookies and tracking consumer health data privacy home 2026 atelier journals llc