Safe harbor for security research

If you research in good faith and follow our Rules for security testing, we treat your research as authorized, and we won't take legal action against you for it.

What that means

• We consider your research authorized under anti-hacking laws. We won't start or support legal action against you for accidental, good-faith breaks of our rules.
• We won't bring a claim against you for getting around technical controls as part of that research.
• We waive the parts of our Terms of Service that would stop that research, for that research only.
• If someone else takes legal action against you over research that followed our rules, we'll make it known that it did.

What it doesn't cover

• Asking for payment before you tell us about a bug, setting a deadline, or threatening to publish, sell or use it.
• Harm to the site or to players: downtime, other people's money or details, or money taken from us.
• Breaking the law where you are.