Security

If you believe you have found a security issue on this website, please tell us. We read every report and we would rather hear about a problem than miss it.

How to report

Use the form on our home page and start your message with the word "Security". Say what you found, the address where it happens and how to repeat it. Do not include personal data that belongs to anyone else.

What we ask

• Test only this website and only what you need to show the issue.
• Do not disrupt the service, overload it, or access or change data that is not yours.
• Give us reasonable time to fix the issue before you make it public.

We will not take action against anyone who reports an issue in good faith and follows these points.

How the site is protected

• All traffic uses HTTPS.
• A content security policy limits what the page may load and run.
• The enquiry form is rate limited and validated on the server.
• The site loads no third-party scripts, fonts or trackers.