Security

Security policy

A static archive, locked down by design.

Last updated September 2026

How the site is built

  • The site is static: plain HTML, CSS and a little JavaScript, built ahead of time. There is no database, no login and no server-side code handling your data.
  • It is served only over HTTPS, with HTTP Strict Transport Security.
  • A strict Content Security Policy allows scripts, styles, fonts and images only from this site. No third-party scripts are loaded.
  • Pages cannot be embedded in other sites, and browser features such as the camera, microphone and location are switched off.
  • Only reading the site is allowed; any other kind of request is refused.

Reporting a vulnerability

If you believe you have found a security problem with this site, please email hello@savemorestores.co.uk with details of what you found and how to reproduce it. We aim to reply within 7 days.

Please do not access or change data that isn’t yours, disrupt the service, or publish the issue before it has been fixed. We are grateful to anyone who reports a problem responsibly.

Our machine-readable contact details are at /.well-known/security.txt.