The contact form now PGP-encrypts messages and attachments, posts get share-card covers, and the header stops scrolling sideways on phones.