Website Security and Reporting

Email info@doinistanbul.com with the subject DoInIstanbul security report. Include the affected page address, the approximate time and a brief description of what you observed. If possible, give steps that help us reproduce the issue without accessing another person's information.

Do not include passwords, payment details, passport copies or unnecessary personal data in your report. Redact sensitive information in screenshots. If further sensitive evidence is needed, contact us first to arrange a suitable method.

Avoid actions that interrupt the website, retrieve other visitors' data, change information or damage systems. Discovering an issue does not authorise further access. This page does not grant penetration-testing permission or promise a reward.

Do not send payment details or identity documents to our general email address. Bookings referred to Istanbul On Boat or RideInIstanbul follow the contact and payment instructions on the relevant booking website. If a message claims to be from DoInIstanbul and asks for unexpected sensitive information or payment, contact us independently to check it.

No website can guarantee absolute security. A reported issue will be assessed according to its nature; this page does not promise a particular response time or certification.