Report a security vulnerability
This page has been automatically translated from German. In the event of any discrepancies, the German version shall prevail.
Family Memories protects families’ memories with end-to-end encryption. If you find a vulnerability, please report it to us. That way, we can fix it before anyone exploits it.
How we encrypt data
A family’s content is encrypted and decrypted solely on its members’ devices. Our white paper explains exactly how this works, where the limitations lie and what we can still see. We also openly acknowledge these limitations there, such as the fact that, on the web, you have to trust the programme code as it is delivered.
Read the white paper (in German and English)
How to report a vulnerability
The easiest way to report a vulnerability is via the form below. You can also send us an email to this address:
It would be helpful to provide: what is affected (the page address or app version), the steps required to reproduce the problem, and what symptoms you are experiencing. A brief example will suffice. Please do not send us large amounts of data.
Report a vulnerability
What we’re asking you to do
- Only use your own accounts and your own test data. Do not access other people’s data, and do not alter or delete anyone else’s data. If you do come across someone else’s data, stop immediately and delete everything you have saved from it.
- Only go as far as is necessary to provide evidence.
- Please do not carry out attacks aimed at disrupting availability (for example, by overloading systems), do not send automated bulk enquiries, do not send spam, do not deceive people (social engineering) and do not carry out attacks on buildings or equipment.
- Give us time to fix it: Please do not publish anything about the vulnerability until it has been fixed, but no later than 90 days after you reported it. We’ll be happy to agree on a suitable time with you.
What we can offer you
- We will confirm receipt of your message within three working days.
- We’ll keep you updated on the investigation and the resolution.
- Anyone who follows these rules and reports a vulnerability in good faith need not fear any legal action from us. We will not pass on your details without your consent.
- If you wish, we will mention you on this page once the issue has been resolved.
We do not pay a cash bonus. We are a small business, and we are all the more grateful to you for that.
What’s included
The family-memories.eu website, including all its subpages, the Family Memories Android app and our services at family-memories.eu. Please report any vulnerabilities affecting our service providers (for example, those providing hosting, database, payment or printing services) directly to them. If they affect us, we would be grateful if you could let us know.
Thank you
No one has been named here yet.