LedgerGov.UK holds a little personal data: the email addresses of people who follow promises, what they follow (which can reveal political opinions), and what readers send in. Please report anything that could expose it, or let someone change the site or its data, privately.

• Preferred: report a vulnerability on GitHub (private to the maintainers).
• Or email privacy@ledgergov.uk.

Please include what you found, how to reproduce it, and what it could expose. We aim to reply within 5 working days and to fix confirmed problems before anything is disclosed. Please don't access other people's data, run load tests, or test against real readers' accounts; a local copy (see the README, "Run it locally") has everything needed.

The site at https://ledgergov.uk, its API (/api/), the editors' area (/admin), the email and Telegram alerts, and the GitHub workflows in this repository.