Security
Account safety and a direct way to report concerns.
How accounts work
Numix uses Unity Authentication for accounts and Unity Cloud Save for profiles and records. Google sign-in is verified through Google and Unity. Password credentials are handled by Unity Authentication; passwords are not written to Numix local saves or cloud profile fields.
Connecting Google to an existing player requires signing in to that player and completing Google sign-in. Matching email addresses alone do not prove ownership or merge accounts.
Protect your access
- Use a unique password and protect your Google account.
- Never share passwords, identity tokens, session tokens, or one-time codes with support.
- Connect Google from your signed-in profile for another way to access the same player.
- Sign out on shared devices.
Report a vulnerability
Email likhithk3033@gmail.com with the subject Numix security report. Include the affected feature, app version, device/platform, reproduction steps, and expected impact. Redact credentials and other players’ information.
Test only accounts and devices you own or have permission to test. Do not access another player’s data, disrupt services, or publish sensitive exploit details before we have had an opportunity to investigate. This page does not authorize testing third-party systems, including Google, Unity, or Cloudflare. We do not offer a paid bug-bounty program or a guaranteed response deadline.
No internet service is completely secure. For data requests, see Privacy and Account deletion.