We take the security of Candy Crush Year Wrapped seriously. If you believe you have found a security vulnerability, please report it to us via email at info@biffnewmedia.com.

Please do not report security vulnerabilities through public GitHub issues.

You should receive a response within 48 hours. If you don't receive a response, please follow up to ensure we received your original message.

Please include:

• Type of issue
• Location of affected code
• Steps to reproduce
• Potential impact
• Proof-of-concept (if possible)

• Testing on production systems
• Social engineering
• DoS attacks
• Automated vulnerability scanning

Email: info@biffnewmedia.com