Where to write about a vulnerability on a site without a bugbounty?

Question

Bug tracking systems

The bottom line is this: there is a pretty good project, I found critical vulnerabilities on it, but they do not have a bugbounty.
Where can I turn to about this, and can I even count on a reward in this case?