How to report a security issue
Last updated: October 14, 2026
If you think you have found a security issue on yourlegacy.tech, we want to know. This page explains how to report it and what you can expect from us.
How to report it
Email contact@yourlegacy.tech with the subject “Security”. Tell us the address or feature affected, the steps to reproduce it and what someone could do with it. Screenshots help.
Do not include other people’s personal data. If you saw any while testing, just tell us what kind of data it was.
You can write in Spanish or in English.
What it covers
The website www.yourlegacy.tech and its pages, including /nfc, the digital cards and the LegacyPhoto Trail platform. YourLegacy Studio and YourLegacy Academy have their own websites; you can report their issues to the same address.
It does not cover the third-party services we use (for example Stripe, Google or Meta) or our clients’ websites: please report those to them.
What we ask of you
Act in good faith. Do not access, change or delete other people’s data beyond the minimum needed to show the issue; if you come across personal data, stop and tell us.
No tests that take the service down (denial of service), no spam, no social engineering of our team or clients and no physical attacks.
Give us reasonable time to fix it before making it public. We suggest 90 days, and we will tell you if we need more.
What we will do
We read every report, confirm we have received it and tell you when it is fixed.
If you act in good faith and within these rules, we will not take legal action against you for that research.
If the issue affects personal data, we handle it under our incident response plan. We only use the data in your report to deal with it.
Rewards
We do not have a bug bounty programme and we do not pay for reports.