Email caeloryx.contact@gmail.com with the subject “Security Report.” Include affected service, steps to reproduce, potential impact, and any safe evidence.

• Accessing, changing, or deleting other users' data.
• Disrupting service or testing against users without consent.
• Publishing exploit details before Caeloryx has a reasonable chance to respond.
• Using social engineering, physical attacks, or denial-of-service testing.

Caeloryx will aim to acknowledge credible reports promptly, investigate them, and communicate progress when practical. As an independent, early-stage project, response times may vary.

Caeloryx supports good-faith research performed within this policy. This statement is not a promise against action by third parties and does not authorize testing outside Caeloryx-owned systems.