Security
Security information for this website, and a direct route to report a concern.
A static website
This website serves prebuilt pages, styles, and local assets. It has no sign-in, accounts, database, admin panel, or form processing. Reading these pages does not require access to any platform account.
Public traffic over HTTPS
The production deployment is designed to serve public traffic over HTTPS. Security headers restrict scripts, resource loading, and framing. The LinkBackfill quick-start guide permits embedding by monday.com.
Limited privileges
The website needs only permission to serve its published files. Website visitors cannot edit content or run administrative actions. No customer credentials or access tokens belong in the website or its public configuration.
No tracking by default
The website includes no analytics, tracking scripts, marketing cookies, or externally loaded scripts. Hosting infrastructure may keep request logs, as described in the Privacy Policy.
Report a vulnerability
Email support@madrigal.org.uk with a description, affected page, and steps to reproduce. Please avoid sending credentials or customer data. Coordinate disclosure with the publisher before sharing sensitive details publicly.
Scope of this page
These statements describe the Madrigal website. LinkBackfill’s installed app has its own data processing and permissions, described in theLinkBackfill Privacy Policy. This page does not assert a certification, audit result, or service guarantee.