Security Policy

Kitsumi browser extension

If you find a security problem in Kitsumi, please report it privately to olexifyyy@gmail.com with "Kitsumi security" in the subject, rather than in a public issue or on Discord. Include what you found, how to reproduce it, and the Kitsumi version and browser you used.

Kitsumi is maintained by one person in their spare time, so there is no set response time, but every report is read. Confirmed problems are fixed with priority, and you can be credited in the changelog if you wish.

Kitsumi has no server and no accounts, so reports concern the extension itself: for example a page being able to run code in the extension, read what Kitsumi stores, or make Kitsumi send data somewhere it should not.

Only the latest version published in the Chrome Web Store and on Firefox Add-ons receives fixes.