These Terms of Service ("Terms") govern your access to and use of Snitch (the "Service"). By creating an account or using the Service, you agree to these Terms. If you do not agree, do not use the Service.
Snitch is a hosted blind cross-site-scripting (XSS) testing platform for security professionals. It provides personalised payloads and a collector that records callbacks when those payloads execute, presenting the captured data to you in a dashboard and by email.
You may use the Service exclusively to test systems that you own or that you have explicit, documented authorisation to test — for example, an in-scope bug-bounty program, a signed penetration-testing engagement, or your own infrastructure. You must not deploy payloads against any system, person, or organisation without authorisation.
You are solely responsible for ensuring your testing is lawful and authorised. Any use of the Service to gain unauthorised access to data or systems, to harm third parties, or in violation of any applicable law is strictly prohibited and constitutes a material breach of these Terms.
You must provide accurate registration information, keep your credentials secure, and are responsible for all activity under your account. We recommend enabling two-factor authentication. You must be of legal age to enter into a contract in your jurisdiction.
Access is sold as time-based subscriptions billed in cryptocurrency through our payment provider, Heleket. Access is granted for the purchased period once payment is confirmed. Because access is delivered digitally and immediately, and because crypto payments are irreversible, payments are generally non-refundable except where required by law. Contact support if you believe there has been a billing error.
When your payload fires, the Service records data from the page it executed on (which may include cookies, storage, page content, and a screenshot). You are responsible for handling that data lawfully, including only capturing it from authorised targets and disclosing findings responsibly to the affected program or owner. See our Privacy Policy for how we process this data on your behalf.
You must not: (a) test without authorisation; (b) use the Service to distribute malware or conduct fraud; (c) attack, overload, or attempt to compromise the Service itself; (d) resell or share your account; or (e) use the Service in any way that is illegal or that could damage third parties.
We may suspend or terminate accounts that breach these Terms, that we reasonably believe are being used for unauthorised or illegal activity, or in response to a valid legal or abuse request, without refund.
The Service is provided "as is" without warranties of any kind. To the maximum extent permitted by law, Snitch is not liable for any indirect, incidental, or consequential damages, or for any loss arising from your use of the Service or from data you capture. Our total liability is limited to the amount you paid in the three months preceding the claim.
We may update these Terms; material changes will be reflected by the "Last updated" date above. Continued use after changes constitutes acceptance.
Questions about these Terms: support@snitch.lc. To report abuse or request removal of data captured about you, see the Privacy Policy.
← Back to Snitch