# Account & security guidance

Practical steps to protect your access and conversations.

Operator: Cittly tech
Updated: 2026-10-11
Scope: All Cittly versions
Canonical: https://docs.cittly.com/security

## Protect your sign-in
Never share your password or one-time codes. Check the domain before entering credentials and be cautious of anyone offering account upgrades, prizes, or moderation help in exchange for a payment or login code.

## Keep personal details private
Avoid sharing your home address, identity documents, financial credentials, or private contact details with strangers. Live WebRTC connections may expose public IP addresses; see [live-chat privacy](/live-chat-privacy).

## Suspected account compromise
Use the available account-recovery controls and contact Cittly tech through the app or [email](mailto:support@cittly.com?subject=Cittly%20account%20security). Explain the issue without sending credentials.

## Report a vulnerability responsibly
Send a concise description to [Cittly tech](mailto:support@cittly.com?subject=Cittly%20security%20report). Do not access other users' data, disrupt services, or publish sensitive technical details before the issue can be reviewed. This guidance is not a promise of a bug bounty.