Skip to content
datatuber home

Legal draft

Acceptable Use Policy

Uses that are prohibited, including abuse of screenshot capture, quotas, and rate limits.

Version
0.2-draft
Status
Draft. Not in effect.
Effective date
Not set

Version history

  1. 0.1-draft (date not set). Initial attorney-review drafts. Not in effect.
  2. 0.2-draft (date not set). Describe email verification, the session cookie, API key hashes, and screenshot quotas. Still a draft. Not in effect.

How to read this draft

These rules describe uses the operator does not allow. They apply to the website now as a standard of conduct, and they are written so a future screenshot API can adopt them. The API is not running. The homepage preview does not fetch URLs. A prohibition here is not a claim that an enforcement system already blocks the conduct.

This policy sits with the Terms of Service. Customers remain responsible for the rights, terms, and laws that apply to a third-party website. A public page is not automatically available for capture or reuse.

Your responsibility

You are responsible for having a lawful basis, and any permission that is required, before you capture a page or use the image. That includes copyright, privacy, confidentiality, contract terms of the target site, and computer-misuse rules. The operator does not review each URL in advance and does not grant rights in the target site.

You are also responsible for the load you place on a target site. A screenshot tool can become a burden on someone else's server if it is used carelessly.

Prohibited uses

Do not use the website or a future API to do any of the following, or to attempt them:

  • Access a system, account, or dataset without authorization.
  • Probe, scan, or attack DataTuber or another network.
  • Target localhost, private network ranges, link-local addresses, cloud metadata services, or other non-public hosts.
  • Attempt server-side request forgery, DNS rebinding, or redirect chains intended to reach a target the service would not fetch directly.
  • Distribute malware, operate phishing, or deceive another person about who you are.
  • Evade a quota, rate limit, suspension, or other restriction.
  • Harass, dox, stalk, or threaten a person, or support unlawful surveillance.
  • Infringe copyright, trademarks, or other rights. See the Copyright and Takedown draft.
  • Violate privacy, including collecting information you have no right to collect.
  • Put excessive automated load on DataTuber or on a target website.
  • Harvest credentials, secrets, cookies, or session tokens from a page.
  • Bypass a login wall, paywall, robots restriction, or other access control a site uses to limit access.
  • Use the service for any unlawful purpose.

The homepage URL checker accepts localhost and does not block private addresses. The capture request refuses those targets, and targets that are not public https URLs, before it asks Cloudflare for a screenshot. That check is not a finished abuse policy.

Monitoring

The operator does not run abuse monitoring on this preview. The repository has no request log of visitor URLs, no anomaly detector, and no review queue. Sample rows in the dashboard are fixture data.

When a real service is operating, the operator may look at complaints, at operational signals the service actually collects, and at logs the host actually keeps, in order to investigate abuse. The operator does not promise to inspect every request or to find every violation.

TODO: OWNER/COUNSEL REVIEW. Describe monitoring only after it exists. Say what is logged, who can read it, and how long it is kept. Update the privacy notice in the same change.

Enforcement

The operator reserves the right, once it can do so, to refuse a URL, throttle traffic, suspend access, and investigate a complaint. The response should be proportionate to the harm and to the evidence. There is no abuse desk today, and no user account to suspend.

Enforcement is not a promise to a third party that the operator will remove material on a fixed timetable. Copyright complaints follow the Copyright and Takedown draft.

TODO: OWNER/COUNSEL REVIEW. Confirm any duty to warn before suspension, any appeal path, and how emergency suspensions differ from ordinary ones.

Reporting abuse

No abuse contact is published. A report cannot be filed through the product today.

TODO: OWNER/COUNSEL REVIEW. Publish a monitored abuse contact before inviting reports. Decide what a complete report must include and how it is acknowledged.