# Security Policy

Feurstagram is an unofficial open-source patch for the Instagram Android app.

Because this project involves a modified APK and user authentication through Instagram, security reports are taken seriously.

## What to report

Please report security issues such as:

- credential leakage;
- unexpected network requests;
- malicious or suspicious patch behavior;
- unsafe release artifacts;
- signature or build integrity problems;
- vulnerabilities in the patching scripts.

## What not to report

Please do not report general Instagram bugs or account issues that are unrelated to Feurstagram.

## How to report

If you believe you found a security issue, please avoid opening a public issue with sensitive details.

Contact the maintainer privately if a contact method is available, or open a minimal issue asking for a private communication channel.

## Trust model

Feurstagram does not collect, proxy, store, or transmit Instagram credentials.

Users are encouraged to inspect the patches and build the APK themselves.