Security Policy

Report a vulnerability

If you believe you have found a security vulnerability on chodorom.com, report it privately to Yeshivas Tomchei Temimim Lubavitch (YTTL) at info@yttl.org. Use the subject “Chodorom security report.”

What to include

• The affected page address and a short description of the issue.
• Steps to reproduce it, using your own account or test information.
• The potential impact and any relevant screenshots with personal information removed.
• A contact address if you would like us to follow up.

Do not email passwords, payment-card details, access tokens, or donor records. Describe sensitive evidence rather than attaching it; ask how to share it if needed.

Respect donors and the campaign

This page provides a reporting channel, not permission to access other people’s accounts or information. Do not alter or delete records, make unauthorized payments, disrupt the website, or test third-party services without their permission. If you encounter another person’s information, stop and report the issue without copying or sharing that information.

Please report privately before publishing details so the issue can be assessed. This policy does not promise a reward or a response or resolution deadline.

Other questions

For questions about donor information, see our Privacy Policy. For donation or receipt questions, email info@yttl.org.