AdsYield welcomes reports from security researchers and members of the public regarding potential security vulnerabilities in our systems and services. We are committed to reviewing all reports we receive and working with reporters to understand and address genuine issues.

Scope. This policy applies to internet-facing systems operated by AdsYield Ltd, including adsyield.com and AdsYield exchange endpoints. Systems operated by third parties on AdsYield’s behalf fall outside this policy; where a report concerns such a system, AdsYield will forward the report to the relevant provider.

How to report. Please send reports to dpo@adsyield.com. Include a description of the issue, the affected system or URL, the steps required to reproduce it, and any supporting material.

What to expect. We will acknowledge receipt within five business days. We will assess the report, keep you informed of our assessment, and notify you when the issue is resolved or when we have determined that no action is required.

Guidelines for researchers. We ask that you make a good faith effort to avoid privacy violations, degradation of service, disruption to production systems, and destruction or modification of data. Please do not access, modify, or retain data belonging to others. Please do not publicly disclose an issue before we have had a reasonable opportunity to address it. We do not currently operate a paid bug bounty programme.

Legal. AdsYield will not pursue action against researchers who report vulnerabilities in good faith and in accordance with this policy.

Last reviewed: August 2026