Security

Report a suspected vulnerability privately to lorenzosison@gmail.com. Include the affected Z0 version, impact, and minimal reproduction steps.

Do not send passwords, OAuth tokens, Minecraft account tokens, private worlds, or unrelated personal data. Do not publish an undisclosed vulnerability in a public issue.

Good-faith research that avoids privacy violations, data destruction, service disruption, and access beyond what is needed to demonstrate the issue is welcome. Z0 will acknowledge a valid report and coordinate remediation and disclosure.