Help > Security

(showing 1-4 of 4)

  • How do I report a security issue?

    At Goodreads we take the security of our users and their data very seriously.

    For security issues related to a single account please contact Customer Care. This includes such items as:

    - Unauthorized account access
    - Spam
    - Copyright infringement
    - Harassment

    For security issues that affect a large number of Goodreads users please contact our security team at security@goodreads.com. This includes such items as:

    - CSRF
    - XSS
    - improper access controls
    - API flaws

    For sensitive communications please use our PGP key: 

    -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.15 (Darwin)
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=oHfZ
-----END PGP PUBLIC KEY BLOCK-----

  • Does Goodreads use SSL to secure your private information?

    All Goodreads pages that collect private information are secured through SSL. SSL is a browser security layer that ensure the information is being sent from your browser to our webservers in an encrypted, secure manner.

    All pages are encrypted with SSL once you are signed in. You can tell if you are on a SSL page by seeing in your browser bar if the page starts with https instead of http. Also, some forms (like our sign in form on the signed out homepage) can submit directly to a SSL page, so you may not see it in the browser bar.

  • Goodreads stores my credit card. Is that secure?

    You can optionally store your credit card on file with Goodreads when using products such as ebooks and self-serve advertising. Goodreads uses a large, secure, 3rd party named Braintree Payment Solutions to store and process credit cards. Goodreads, including all our employees, never have access to your credit card information. Braintree is PCI complaint, and handles payment infrastructure for many large companies.

  • Will Goodreads call me on the phone?

    Goodreads does not conduct unsolicited telephone communications or promotions. If you believe you have received an unsolicited phone call from Goodreads, we recommend that you do not pick up the phone or provide any personal information. Please email us at support@goodreads.com to report any activity of this nature.

    • © 2016 Goodreads Inc