# Security Policy

Do not report security issues in public GitHub issues.

Please email the repository maintainer with:

- A description of the issue
- Steps to reproduce it
- The affected theme version
- Any suggested mitigation

Never include Shopify access tokens, customer data, or store credentials in reports.
