Coordinated disclosure

Report a security issue

Please report suspected vulnerabilities privately before publishing details.

Private channel

Email kopplaygame@gmail.com using the exact subject prefix [Casual Meta][SECURITY]. KopPlay aims to acknowledge a report within five business days.

Include

Affected package and exact Unity versions
Impact and the minimum reproducible steps
Relevant package-owned code paths and sanitized logs
Whether the issue has been disclosed elsewhere

Do not include

Credentials, access tokens or private keys
Complete proprietary projects or raw customer data
Unredacted save files, device identifiers or personal filesystem paths

This channel is for vulnerabilities in shipped KopPlay package behavior. Third-party services and consumer-owned integrations remain under their respective owners' security processes.