⚠ Anyone with the public page link, including strangers in shared school groups, could learn the baker's home address and watch her pickup schedule.
Mitigation
Reveal exact address and door instructions only after payment, in confirmations to the paying buyer. Show only a neighbourhood on the public page. Let the baker revoke or rotate links.
⚠ A baker omits or misstates an allergen, or edits allergen notes after purchase, so an allergic child eats a mislabelled bake.
Mitigation
Require an allergen declaration per item before publishing. Version-stamp it in order confirmations and labels. Notify buyers of post-sale changes and block silent edits on sold items.
⚠ Bots or rivals grab all slots and stock with unpaid holds, or abuse waitlist offers, to block real neighbours or hoard scarce items.
Mitigation
Hold stock only during short payment windows. Rate-limit claims per device, phone and email. Make waitlist offers expire fast and pass to the next person.
⚠ Fake baker pages or phished payment links take deposits from buyers, then vanish, or divert payouts by changing bank details.
Mitigation
Take payments only through hosted checkout with payouts held until pickup is marked. Require re-verification and a cooling-off period on payout changes. Provide buyer refund and report flows.
⚠ Order confirmations and reminders expose buyer names, phone numbers or allergy notes to other buyers via guessable order links or shared prep sheets.
Mitigation
Use unguessable, expiring order tokens. Show buyers only their own data. Restrict the prep sheet and printable labels to the baker, with buyer surnames and contact details minimised.