Acceptable Use Policy

Normal permitted access

People may browse public pages, use the browser tools, save their own generated output and link to public content. Normal search engine crawling is permitted where it follows the published robots.txt, respects reasonable rates and does not evade access controls.

Security research requires authorization when it would go beyond ordinary public interaction or could affect data, availability or another user.

Prohibited automation and extraction

Do not run abusive automated scraping, extract the site or database at harmful scale, ignore rate limits, rotate identities to evade controls, or send request floods. Do not reproduce substantial protected content as a competing database or service without permission or a lawful basis.

Lightweight indexing and accessibility tools remain subject to proportionate request rates and published rules.

Infrastructure and security abuse

Do not deliberately overload infrastructure, exploit vulnerabilities, bypass authentication or security controls, inject code, introduce malware, interfere with network operation, enumerate protected resources, or access systems and data without authorization.

Do not attempt to weaken the isolated tool boundary, cause secret values to be transmitted, misuse postMessage channels, or frame the secure origin from an unauthorized site.

Unlawful and harmful use

Do not use the tools or content to facilitate unlawful account access, fraud, stalking, harassment, credential theft, malware delivery, evasion of lawful restrictions or harm to another person. A neutral password generator does not authorize misuse of its output.

Do not impersonate the operator, falsely claim a partnership, or use the site name to solicit credentials.

Responsible disclosure

Report a suspected vulnerability through the contact page. Use a minimal harmless proof. Do not access other people’s data, persist on systems, disrupt service, demand payment, publish secrets or continue after the operator asks you to stop.

This policy is not a blanket safe-harbor promise. Obtain written authorization before testing that may create risk.

Defensive measures

The operator and infrastructure providers may use rate limiting, Cloudflare security controls, logging, challenges, IP or network blocking, and temporary or permanent access restriction to protect the service. Measures may be automated and can occasionally affect legitimate traffic.

Contact the operator with the time, URL and relevant error identifier if you believe access was blocked incorrectly. Do not include passwords or tokens.

Enforcement and preservation

Suspected abuse may be investigated, logged and preserved. Access can be restricted without advance notice when needed to contain risk. Serious or unlawful conduct may be reported to providers or competent authorities where appropriate.

Enforcement is proportionate where practical and does not create an obligation to monitor every visitor or retain data indefinitely.

Changes and relationship to other terms

This policy may change as threats and infrastructure change. It supplements the Terms of Use, Privacy Policy and Security and Privacy Methodology. If a mandatory law conflicts with this policy, that law controls to the extent required.