Addressing the security concerns you may have seen online

Hey everyone. You might have seen some posts on Reddit and Discord claiming the app has security vulnerabilities exposing your personal data.

I want to address this directly since its getting kinda scary for a lot of users

What actually happened:

Not an attack, not a leak, just a simple bug in late Jenuary. When we first introduced the leaderboard about a month ago, there was a brief period where your Patreon display name could show up on the leaderboard as a fallback if you hadn't picked a username yet.

This was a privacy oversight on my part, and it was fixed on January 28th in v5.4.7 about two weeks after the leaderboard launched

In restrospect I should have communicated about this publicly when I fixed it, that was a mistake and I'm sorry about that

What's NOT true

- No emails were ever exposed to other users. Never, on any endpoint.

- No billing names or payment info was ever accessible

- The claim of "5 months" and "1100 users exposed" like fr the app is 2 months old and the leaderboard is even newer than that

- Nobody can browse or look up other users' private data. The system uses random IDs that aren't guessable or listable

What I've done since:

- Display names are stripped from all public endpoints if they match your Patreon name (11+ places in the code)

- Privacy toggles: you control whether your online status and profile picture are visible

- Full account deletion available in the Settings tab , removes ALL your data from the server

- Data export so you can see exactly what's stored

- Privacy policy page added

- Auth token system with server-side validation

- Anti-cheat and rate limiting

The entire codebase is public on GitHub. Every commit, every fix, every timestamp its all verifiable
I'm a solo dev and I'm not perfect, but when issues come up I fix them, and I'm going to do better about communicating when I do (even if we are updating like constantly)

If you have any concerns or questions, my DMs are always open.
Thank you for your support, it genuinely means a lot

also linking the privacy policy here , for clarity about whats stored
https://codebambi.github.io/Conditioning-Control-Panel---CSharp-WPF/privacy-policy.html

Thanks again for your trust and for sticking around ❤️🔒

CodeBambi