Account access
Sign-in to hu.ci and Control uses a single-use email code, valid for up to 10 minutes. Roles determine account access, and the server checks permissions on requests. Sessions can be revoked when account permissions change.
Security checks and access records help identify and investigate misuse. Our privacy notice explains what information is processed.
Reporting a vulnerability
Email hi@hu.ci with the affected address, steps to reproduce the issue and its potential impact. Do not share sign-in codes, passwords or other users’ information. Where possible, provide a small example without personal information.
Limit your investigation to what is needed to demonstrate the issue. Do not modify or delete information or carry out disruptive tests. Coordinate further testing or publication with us.