Acceptable Use Policy

This policy applies to:

• every account, workspace and team member, on free and paid plans alike;
• use through the dashboard, the API and API keys, integrations, and any script or bot acting for you;
• everything shown or shared through DNSPeek: preview links, QA and launch readiness reports, visual compares, client comments and branded pages.

Workspace owners are responsible for the members they invite, and you are responsible for anything done with your account or your API keys.

You may preview only sites you own, or sites you are authorised to work on (for example as the site's developer, agency or hosting provider, with the owner's permission). The same applies to the server you point a preview at: it must be a server you or your client control, or are allowed to test.

If we ask, you must be able to show that authorisation, for example with a DNS TXT record on the domain, a file we name placed on the site, or an email from an address on that domain.

You must not use DNSPeek, or let anyone use it through your account, for:

• Phishing and credential harvesting: pages that collect passwords, card or bank details, one-time codes or other personal data under false pretences, or deceptive copies of login and payment pages.
• Impersonation: pretending to be a brand, bank, payment provider, government body or another person or organisation.
• Malware and unwanted software: distributing viruses, ransomware, spyware, exploit kits, cryptominers, deceptive downloads, or running command and control infrastructure.
• Illegal content: content or activity that is unlawful where it is published or viewed, including fraud, illegal goods and services, and violent extremist content.
• Child sexual abuse material: we have zero tolerance. We disable it immediately, terminate the accounts involved and report it to the relevant authorities.
• Copyright and trademark infringement: previewing, copying or sharing sites, designs or content you do not own and are not authorised to work on.
• Spam: sending preview or report links in unsolicited bulk messages, or posting them to promote or disguise other content.
• Harassment and hate: threatening, harassing or doxxing people, or content that promotes violence or hatred against people for who they are, including through comments.
• Evading our safety measures: getting around the Safe Browsing check, the blocklist, rate limits or plan limits, or opening new accounts or workspaces after we have disabled, suspended or terminated yours.
• Targeting private networks: pointing previews at internal, private or loopback addresses, or at systems behind a firewall you are not authorised to reach.
• Attacking or overloading others: using previews to scan, attack, flood or stress-test third-party systems, to scrape sites at scale, or to hide where traffic comes from.
• Reselling access: reselling, sublicensing or white-labelling DNSPeek unless your plan allows it or we have agreed in writing.
• Unlawful data collection: using client comments, forms on previewed sites or reports to collect personal data without a lawful basis, or collecting data from people who have not been told about it.

We use a mix of automated checks and reports from the public. In particular:

• new preview links are checked against Google Safe Browsing, and a link flagged there is disabled automatically;
• links to private, internal and loopback addresses are refused;
• we keep a blocklist of domains (including their subdomains), IP addresses and IP ranges that previews may not use;
• we apply rate limits, and review reports sent through our abuse form or by email;
• we keep technical records such as the target domain and IP of each link, when it was created and by which account, which we use to investigate abuse.

We do not review every preview by hand, and no check catches everything. Passing our checks does not mean a site is safe, lawful or authorised; that stays your responsibility.

When we reasonably believe this policy has been broken, we usually act in steps that fit how serious it is:

1. Warning: we tell the account or workspace owner what is wrong and what to fix.
2. Link disabled: the preview or report stops working, and its target may be added to our blocklist.
3. Suspension: the account is disabled or the workspace suspended; its data is kept while we review.
4. Termination: the account or workspace is closed permanently.

We may skip steps and act immediately, without notice, for phishing, malware, child sexual abuse material, when a court order or other legal obligation requires it, or when the service, our domains or other users are at risk. Where it is lawful and safe, we tell the workspace owner what we did and why.

If we suspend or terminate an account or workspace because it was used for illegal activity or for a serious or repeated breach of this policy, fees already paid are not refunded, to the extent permitted by law. This applies together with the billing terms in the Terms of Service and our Refund Policy.

Every preview and shared report has a “Report abuse” link that opens our abuse report form for that page. You do not need an account. Choose a reason (phishing, malware, copyright or other), add what you saw and, if you want to hear back, your email.

You can also email support@dnspeek.link with the preview URL and what is wrong with it. Please do not send malware samples or illegal images; a link and a description are enough.

DNSPeek does not host the sites shown in previews: a preview forwards visitors to a server chosen by one of our users. We can disable the preview link on our domains; the site itself stays on its hosting, so you may also want to contact the hosting provider.

To report infringement of your copyright or trademark, email support@dnspeek.link with:

• the work or trademark you believe is infringed;
• the preview or report URL(s) on our domains where it appears;
• your name, postal address, phone number and email;
• a statement that you believe in good faith the use is not authorised by the owner, its agent or the law;
• a statement that the notice is accurate and that you are the owner or authorised to act for the owner;
• your physical or electronic signature.

We review complete notices, disable the material when the notice is valid, and forward a copy to the workspace owner. Incomplete notices may take longer or be returned.

Counter-notice. If your link was disabled after a notice and you believe that was a mistake or you are authorised to use the material, reply with: the disabled URL, a statement in good faith that it was removed by mistake or misidentification, your contact details, your consent to the jurisdiction of the courts that apply to the notice, and your signature. We pass it to the person who sent the notice and may restore the link if they do not tell us within a reasonable time that they have started legal action.

Repeat infringers. We terminate accounts and workspaces that repeatedly infringe the rights of others, where appropriate.

If you think we got it wrong, reply to the email we sent you, or write to support@dnspeek.link, within 30 days. Include the link alias or workspace name, why you believe the decision is wrong, and any proof that you own or are authorised to work on the site (see section 2).

A person reviews every appeal. We aim to reply within 3 business days; complex cases or copyright disputes can take longer. If we accept the appeal we restore what we disabled and tell you; if not, we explain why.

We disclose account data to law enforcement or other authorities only in response to valid legal process that applies to us, or where we believe in good faith that it is needed to prevent imminent harm to someone. We review each request and may push back on requests that are too broad.

When we receive a valid request, we may preserve the relevant data for the time the request or the law requires. We tell the affected user before disclosing their data, unless the law or a court order forbids it, or telling them would put someone at risk.

Authorities can contact us at support@dnspeek.link.

We may update this policy as the service and the risks change. We will change the “last updated” date above and, for material changes, tell account owners by email or in the app, as described in the Terms of Service.