Skip to content

For what you shouldn’t say in plaintext.

Encrypt it to security@eclean.gg and only we can read it. Usually that means a vulnerability report, but anything private is welcome.

Fingerprint

ECE2 7CC8 37AE A02C 0BDC 300D 8515 FAED D338 C74B

Verify every character before you trust the key. A fingerprint that almost matches is still a different key.

The key itself.

Bound to
eclean <security@eclean.gg>
Key ID
8515FAEDD338C74B
Algorithm
Ed25519
Created
August 11, 2026
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=VRq0
-----END PGP PUBLIC KEY BLOCK-----

The raw file at eclean.gg/pgp/eclean-security.asc carries this same key. It is what your tooling imports and what our security.txt points to, so treat this page as the source of record.

Three commands, start to finish.

The whole flow runs in stock gpg, with nothing to install beyond what you already run.

  1. 1

    Import the key

    Fetch the raw key straight into your keyring. The file and this page carry the same key.

    curl -s https://eclean.gg/pgp/eclean-security.asc | gpg --import
  2. 2

    Verify the fingerprint

    The output must match the fingerprint above, all forty characters of it.

    gpg --fingerprint security@eclean.gg
  3. 3

    Encrypt and send

    Mail the result to security@eclean.gg. A person decrypts it, and only that person reads it.

    gpg --armor --encrypt -r security@eclean.gg message.txt

Asked and answered.

Who is this for?

Anyone with something confidential to tell us. Security researchers use it most, but the key works the same for a whistleblower, a journalist, or a customer who would rather not write in the clear.

What is PGP?

An encryption standard from 1991, also called OpenPGP. Anyone can lock a message with the public key on this page, and only our private key can unlock it. Free tools like gpg speak it on every platform.

Do I have to encrypt?

No. Plain mail to security@eclean.gg reaches the same person. It just travels like any other email and can be read along the way. Encrypt when the content deserves it.

Can I get support here?

No. Support is faster at hello@eclean.gg, where the whole team can help you. This inbox is reserved for messages that actually need encryption.

Who can read what I send?

Between your machine and ours, nobody, which is what the encryption is for. At our end, one person holds the private key and decrypts on hardware we control. The plaintext is not pasted into ticket systems or shared inboxes.

Will I get a reply?

Yes, from a person, confirming what you sent arrived and what happens next. Include your own public key if you want that reply encrypted too.

Reported bugs get fixed. Reporters get named.

Report a vulnerability privately, give us time to fix it, and your name goes on the acknowledgements page for good.

Read the acknowledgements

Rather skip the key entirely?

Plain email to security@eclean.gg reaches the same team. Use encryption when the contents deserve it.

Email security@eclean.gg