This policy covers every repository, game and app published by NR Games
Send the report privately to rybak.nekyadnex.ru@gmail.com with the subject SECURITY: <product>
Do not open a public issue, pull request or discussion for a vulnerability
Include:
- the product and version (for a game: the version shown in Settings, and the store you installed it from);
- what an attacker can do and the steps to reproduce it;
- any proof of concept, logs or screenshots
| Step | Time |
|---|---|
| We confirm we received the report | 3 business days |
| We confirm or reject the issue | 10 business days |
| A fix ships in a store update | as fast as the store review allows |
We credit reporters in the release notes unless you ask us not to
In scope: our games and apps from Google Play, Huawei AppGallery and RuStore, our websites, and the code in this organization Out of scope: issues in third-party stores, ad networks or operating systems - report those to their owners