NotyCaption handles web application code and integrations with Google services. Report security vulnerabilities privately through GitHub security reporting when available.

Never publish OAuth secrets, tokens, private Drive links, user data or exploitable authentication details in a public issue.

Include the affected page/component, reproduction steps, impact and safe test details when possible.