Security Policy

Please do not report security vulnerabilities through public GitHub issues, pull requests, or discussions.

Reporting a Vulnerability

Use the contact form on the official website:

Include:

A concise description of the issue.
Steps to reproduce.
Affected version, if known.
Whether the issue requires a specific Shopify configuration, app, browser, or customer action.

Do not include live customer data, access tokens, API keys, store passwords, or other secrets.

The current public release is the supported version. Older releases may receive fixes when the issue is severe and practical to patch.

Please allow reasonable time for review and remediation before publishing details elsewhere.