Translation for information only. Only the German version is legally binding. Mandatory statutory rights remain unaffected.
Provider: schukai, postal address: Eichenstraße 26, 82290 Landsberied, Germany. Full provider details are available in the legal notice.
Security contact
Please send reports of potential vulnerabilities to hey@schukai.com. Include the word Sicherheitsmeldung (security report) and the name of the affected product or service in the subject line.
Do not send passwords, private keys, active session tokens or unnecessary personal data by email. If confidential evidence is needed for the investigation, we will agree a suitable transfer method with you.
Useful information
- The affected product, app, website or service
- The version, platform and, where relevant, the affected URL
- A factual description of the observed behaviour
- Reproducible steps without real credentials
- Possible consequences and any protective measures already taken
- A way to contact you with follow-up questions
Screenshots or log extracts should be limited to the necessary portion and cleared of third-party data and access information before submission.
Responsible testing
Limit testing to your own accounts, your own data and systems for which you have express authorisation. In particular, avoid accessing third-party data, making lasting changes, using malware, carrying out automated load tests or social engineering, or disrupting ongoing operations.
Submitting a report does not authorise you to bypass safeguards or access third-party systems.
How we handle a report
We check whether the described behaviour can be reproduced and which product or operator is responsible. If a vulnerability is confirmed, we determine the necessary protective and corrective measures according to its impact, exploitability and the affected systems.
This page does not promise a fixed general response or remediation deadline. Statutory reporting and action requirements and contractually agreed deadlines remain unaffected.
Security updates and supported versions
Supported versions and update channels depend on the respective product, contract and distribution channel. Notices of discontinuation or necessary updates are published through the product's designated channels or sent to the affected contracting parties.
Statutory obligations to provide necessary updates for consumer products remain unaffected.
Active abuse or a data protection incident
If an ongoing attack, a compromised account or a possible data protection incident requires immediate action, also mark the message dringend (urgent). Customers should additionally use the support or incident-reporting channel agreed in their contract.