Trust

Security

How we protect Scout Pages — and the Group and District sites you run on it.

Last updated on 23 September 2026 · Scout Pages Ltd · Company number 17476499

This is a trust page, not a second Privacy Policy. It explains how we protect Scout Pages and the Group and District sites you run on it. For how we handle personal information, see the Privacy Policy. For the terms that apply when you use the service, see the Terms of Service.

In transit

All traffic uses TLS (HTTPS). Custom domains get certificates at the edge.

Passwords

Account passwords are hashed with industry-standard one-way hashing. We never store them in plain text.

Access

Ops access to customer data is limited to what's needed to run and support the service.

No tracking stack

No advertising cookies, no third-party analytics pixels. Session cookie for login only.

Where things run

Scout Pages hosts websites for UK Scout Groups and Districts. Here is where the service runs today:

  • Application & data — hosted with our app and database providers (today: our VPS stack + Turso).
  • Edge — Cloudflare in front for delivery and security filtering.
  • Payments — Stripe for Scout Pages subscriptions; GoCardless when a Group turns on Pay now in Shop. We don't store full card numbers.
  • Email — transactional mail via Resend.

We don't claim SOC 2, ISO 27001, or third-party pen-test badges we haven't earned.

What we store (short version)

We store leader accounts and the published content you put on a Group or District site. We also store form submissions and shop orders.

Group sites use privacy-friendly first-party analytics. We do not store IP addresses. The daily visitor estimate is a one-way hash. See the Privacy Policy for the full detail.

Backups and incidents

We take regular backups. If a security incident affects your account or site data, we will contact the account email with what happened, what we're doing, and what you should do.

What we don't do

  • We don't sell your data.
  • We don't run cross-site advertising trackers.
  • We don't claim to be an official Scout Association product, or to be "backed by" Scouts UK, Scouts Cymru, or Scouts Scotland.

Reporting a vulnerability

If you find a security issue on Scout Pages, email help@scoutpages.co.uk with enough detail for us to reproduce it.

We'll acknowledge your report and fix what we can.

We don't run a bug bounty — no cash, credit, or other rewards.

Please don't access other people's data, disrupt the service, or publish your findings until we've had a chance to respond.

Questions

If you have a question about security, email help@scoutpages.co.uk.

Scout Pages Ltd · Company number 17476499 · Registered in England and Wales

Registered with the Information Commissioner's Office · C2041151