Private, by default.
Your draft stays in this page’s memory. Nothing is sent until you select Send report. Closing or refreshing the page clears the draft.
Report content and contact details expire after 30 days. Physical removal runs on requests and an hourly cleanup, when available. Receipt records remain for 90 days.
Do not include passwords, tokens or private messages. For vulnerabilities, use private security reporting.