Security & safe use

Keep your account in your hands

• Use a unique password and protect the email address or phone connected to your account.
• Keep passwords, one-time codes and recovery codes private. Do not send them to someone who says they are support.
• Review your active sessions in Account security and remove devices you do not recognise. Log out when you finish on a shared device.
• If you lose access or suspect someone else is using your account, contact [email protected]. Explain the issue without sending credentials or identity documents in your first message.

Check an order before you pay or confirm it

Read the item description, condition, size, delivery arrangement and seller’s policies. Keep the agreed specification for custom work, together with your order link and payment reference.

Use the payment methods offered by checkout. Never send a PIN, full card number or one-time code in chat or email. Do not pay another fee just because a message claims it will release a refund.

A shop page or verification badge does not establish the authenticity, condition or delivery of every item. Only confirm receipt after you have received and checked your order. For suspected fraud or an unresolved purchase, report the order problem.

Browser and account protections

Yogroo uses HTTPS and browser protection headers on its public website. Sign-in and private guest-order credentials use server-set, HttpOnly cookies, so page scripts cannot read those cookies. Sensitive account changes use a separate confirmation flow where required.

Your browser may also hold bag data, privacy choices and tab-session information. Read Cookies & browser storage for the purposes, lifetimes and scope of these controls, or ask about your personal information.

Found a security weakness?

Email [email protected] with the subject “Security report”. Include the affected page or feature, a short description, safe steps to reproduce and the possible impact. Device and browser versions can help.

Leave out passwords, active tokens, private customer data and full identity or payment details. If evidence contains sensitive information, ask how to share it securely before sending it. Test only accounts and data you are authorised to use.

Keep the email thread for follow-up and include any reference provided by support. For an ordinary order, refund or shop complaint, use the reporting instructions so the issue reaches the appropriate review.