Security vulnerability

Submit a security report. Every submission receives a reference number and private status token.

No account required

Security vulnerability report

Report a suspected security vulnerability, account-compromise risk or weakness affecting Studiark. Do not include passwords, access tokens, private keys, exploit data belonging to other people or destructive test results.

Contact and location

Provide at least one secure route for status updates: email or another secure contact method.

Your name (optional)

Email for secure status updates

Other secure contact method (optional)

Describe another secure route or a contact preference. Do not enter a password.

Two-letter country or territory code (optional)

Use the ISO code, for example GB, US or DE.

Report details

Affected URL or surface (optional)

Enter one Studiark link, content ID, profile ID or other textual locator per line.

Vulnerability overview

Provide only the information needed to review this request.

Preferred coordination or response (optional)

There is an immediate risk of serious harm.

Technical details

Affected surface

Vulnerability summary

Safe reproduction steps

Potential impact

This vulnerability has already been publicly disclosed.

For this longer form, you can save a draft in this browser for up to seven days. It is stored on this device, so do not use it on a shared or public device.

After you submit

What happens after a report

ReceiptWe issue a reference number and record the submission time.
TriageWe assess urgency, safety, jurisdiction, evidence and whether immediate restriction is appropriate.
ReviewAutomated tools may identify matching content, but a trained reviewer evaluates the report and relevant context where appropriate.
ActionWe may restrict, remove, label, preserve, escalate, request information, reject the report or take action against an account.
NoticeWe tell the reporter the result or next step and notify the affected user where appropriate and safe.
AppealEligible reporters and affected users can challenge the decision.

Request type	Operational response target
Immediate child-safety or credible life-safety risk	Urgent triage; contact emergency services directly when immediate intervention is needed
Valid non-consensual intimate image or sexual deepfake request	Remove or disable and address known identical copies within 48 hours
Other suspected illegal content	Prompt risk-based review; target initial triage within 24 hours
Face, voice, impersonation, doxxing or privacy-content report	Target initial decision within seven days; faster for credible imminent harm
Copyright or trademark notice	Target initial review within seven days after receiving a sufficiently complete notice
Moderation appeal	Target decision within 14 days, subject to complexity and safety
Privacy rights request	Within the period required by applicable law; normally one month in the UK and EEA

Targets are not guarantees where a report is incomplete, unusually complex, abusive or subject to legal process. Mandatory legal deadlines always control. We provide status information if review takes materially longer than the stated target.

Evidence and confidentiality

We collect only evidence reasonably needed to process a request. Sensitive evidence should use a secure upload route, not a public post or ordinary message. Access is restricted and evidence is retained according to the Privacy Policy and applicable legal duties.

Law enforcement

We may preserve content and account records, disclose information in response to valid legal process, or report suspected child sexual exploitation and other serious criminal conduct to competent authorities. We consider necessity, proportionality and the safety of affected people. We may not be able to disclose details that would compromise an investigation or another person's privacy.

Misuse of reporting systems

Do not submit knowingly false reports, forged notices, fraudulent signatures, unlawful demands or repeated reports intended to harass. We may restrict abusive submissions and take action against accounts that misuse reporting tools. A good-faith report is not penalised merely because we reach a different conclusion.

Independent resources

Specialist help outside Studiark

These organisations are independent of Helmbyte. Their availability and eligibility rules may vary by country and circumstance.

NCMEC Take It DownHashing service for imagery involving people under 18 StopNCII.orgHashing support for adults FTC TAKE IT DOWN Act informationOfficial US consumer information UK Information Commissioner's OfficeData-protection complaint guidance EU Digital Services Act user rightsOfficial European Commission guidance