Report abuse or a security issue

If someone is abusing a Swaymoon service, or you think there is a security risk, choose “Report abuse or a security issue” on the Portal.

When to use this intent

• Harassment, fraud, junk, or impersonation
• Unauthorized access, odd sign-ins, or signs of account takeover
• Risk that a secret, token, or code leaked (do not paste the live secret into the report)
• A clear vulnerability or a dangerous, reproducible behavior

You may also email hello@swaymoon.com, but prefer the Portal so progress can be tracked.

What to include

• When it happened and which product
• What you saw, plus links or usernames if you have them
• Screenshots or a zip of logs (follow Attachments)
• What you already did (sign out other devices, rotate a key)

What not to do

• Do not paste still-valid passwords, codes, passkeys, or client_secret in the report or the mail
• Do not file a retaliatory false report
• Do not publish an unreleased issue; tell us first through this Portal or mail

We will review and may ask for more. The Portal status and public replies are the record of what we did.