Security

Report a security issue

Help us protect athletes, families, coaches, and sports organizations.

Email support@sightsmash.com with the subject SECURITY REPORT. Include the affected URL or component, impact, and reproducible steps. Send the least data needed and do not include secrets, full customer records, or minors' data.

Safe research boundaries

Test only accounts and data you own or have explicit written permission to use. Do not test real minors or unrelated customers, disrupt service, use social engineering, access provider accounts, exfiltrate data, or run high-volume automated scans. Stop and report immediately if you encounter another person's data or service instability.

What happens next

We aim to acknowledge a complete report within three business days, assign an owner, and coordinate remediation and disclosure. There is currently no bug bounty or guaranteed payment.