Email support@playfrog.gg. Please do not open a public report before we have replied.

Include what you found, how to reproduce it, and what you think the impact is. A game_id or a URL helps if the issue involves a published game.

We aim to reply within five working days. If you have not heard back after that, send a follow-up rather than assuming the report was received.

In scope: playfrog.gg, api.playfrog.games, mcp.playfrog.games, mcp-open.playfrog.games, published game pages under *.playfrog.games, and the playfrog npm package.

Out of scope: the content of games published by other people. Report those through the content policy or to abuse@playfrog.gg, which is the staffed path for content rather than software issues.

Do not run automated scanners against the API in a way that degrades service for other people, and do not access, modify or delete games belonging to anyone else. If you need a target, publish your own game and test against it.