Security

How to report a problem, and where your projects and your players' data are kept.

Report a vulnerability

If you find a security problem in SimplyStream, Strata, the game launcher or our sites, email security@simplystream.com. Say what you found and how to reproduce it. A person reads every report and will write back.

Please give us a chance to fix the problem before you publish it, and don't access other people's data or degrade the service while you test.

Email a report

Where things run

Sites, APIs and game files: Served over HTTPS through Cloudflare, which also stores your builds and serves them to players.
Account and project records: A Postgres database hosted by Neon.
Cloud GPU sessions and multiplayer servers: Virtual machines from major cloud providers, started when players need them.
Games in the browser: Run on the player's own device. Nothing is installed, and the game only gets what the browser allows any web page.

Compliance

Wonder Interactive does not hold security certifications of its own yet. If your organisation needs a questionnaire answered or a data processing agreement, write to security@simplystream.com.

What we collect and why is in the privacy policy.