Report securityLegal
Tell us privately. We will investigate.
If you believe you have found a security issue in AnotherPillow, send the minimum information needed to reproduce it. Never include guest data, passwords, access tokens or card details.
Responsible disclosureResponsible disclosure
Send a minimal security report.
Use a safe reproduction description only. The report is stored before notification is attempted and receives a traceable reference.- One shared AnotherPillow inbox
- Saved before email is attempted
- A human replies before anything changes
What to send
Describe the affected page or function, the observed result and a safe sequence we can use to reproduce it.
- Affected URL or feature
- Reproduction steps
- Expected and observed behaviour
What not to do
Do not access another person’s account, interrupt availability, download hotel data or continue testing after you have enough evidence.
- No social engineering
- No denial-of-service testing
- No extraction of personal data
What happens next
A human reviews the report, confirms a safe contact route and records the investigation. Production issues are prioritised by impact.
- Acknowledgement
- Impact review
- Documented resolution