If you discover a security vulnerability in Mercury, please report it by emailing harrykumar.kp@gmail.com.

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (if applicable)

We will respond within 48 hours and work with you to understand and address the issue.

Mercury is designed with security in mind:

• No telemetry or data collection
• No network requests except those you explicitly make
• Local-only data storage
• No automatic updates without user consent