diff --git a/README.md b/README.md
index 2ed1cc9..3070458 100644
--- a/README.md
+++ b/README.md
@@ -72,6 +72,13 @@ and set `WORLD_NAME` to match.
   entry are only created if missing, and any previous container is removed
   before the new one is started.
 
+## Sensitive data
+
+- There is a secrets file in gitignore
+- The IDs for all linode API calls are linked to my account, but non-sensitive.
+- The passwords are placeholders, edited when setting up StackScripts
+- Repo can be made public, as no git snapshot had sensitive data.
+
 ## StackScript
 
 ```bash