Legal
Security
How to report a security problem with this site.
Last updated
If you think you’ve found a security problem with this site, thank you for letting me know. Please report it privately before telling anyone else.
How to report
Email the security contact below with a description of the problem, the page or address affected, and the steps to reproduce it. I’ll reply within 5 working days.
In scope
- This website and its forms
- The shop basket and checkout handoff
Out of scope
- Third-party services the site links to, such as the payment provider, newsletter platform and retailers. Please report those to the service directly.
- Denial of service attacks, spam, and social engineering.
Please don’t access or change other people’s data while testing. This site doesn’t offer a paid bug bounty.
Security contact
Email security@example.com. This address is also published in security.txt.