Home Security & privacy What not to send to general Support

What not to send to general Support

Last updated on Sep 17, 2026

Never paste these into chat or hi@ tickets

  • Passwords, password hashes, OTP codes, TOTP seeds

  • JWTs, session cookies, API keys, cloud provider tokens

  • Stripe secrets or full payment card data

  • Private keys and database dumps with personal data

Rotate any secret that was pasted by mistake, then tell Support that a rotation happened without resending the value.

Specialized ForePath addresses

Topic Address
Vulnerabilities / CVD / VDP [email protected] (see also security.txt and forepath.io/legal)
DSA-related illegal content reports [email protected]
TCO / takedown style reports [email protected] (handled 24/7 per published aims)
Authority requests [email protected]
Privacy / DSAR [email protected] and +49 (0) 5221 1411690

Response aims (not contractual SLAs)

  • General Support: about 2 business days

  • Sales: about 1 business day

  • Security acknowledgement: about 48 hours

  • DSA confirmation: about 24 hours

  • TCO path: 24/7 intake per published aims

Contractual SLAs override these aims when present.