Acceptable use policy
Boring Utils is free because it’s used the way it was built to be used: by people checking their own certificates, domains and charts. These are the things that break that.
Last updated
Use the services for what they’re for
Check and monitor the certificates and domains you run or care about, make charts from your data, and read the guides. That covers almost everyone. This policy is part of our terms of service.
Don’t
- Automate bulk checks or scrape the API. Our API exists to serve the website, not as a public service. Don’t script requests to it, run checks in bulk, or harvest results. If you need to check many domains, write to us.
- Point the checker at private networks. Don’t try to make our checker connect to private, internal, loopback, link-local or other non-public addresses, whether directly or through DNS tricks such as rebinding, and don’t try to use it to reach anything other than a public site’s TLS certificate.
- Attack or overload the services. No probing for vulnerabilities without permission, denial of service, getting around rate limits, or interfering with other people’s use.
- Get around the free limits. Don’t use many email addresses or other workarounds to monitor more domains than the free plan allows.
- Sign up other people. Only use email addresses that are yours or that you are allowed to sign up.
- Put illegal content in charts. Don’t use Chart Link to make or share charts that infringe someone’s rights, defame or harass anyone, incite violence, or include personal data you have no right to use.
- Misrepresent results. Don’t present a Boring Utils check as a security audit, a certification or a guarantee. It is a record of what our checker saw at one moment.
What happens if this policy is broken
We may rate-limit or block requests, remove watched domains, unsubscribe addresses, or suspend access, with or without warning depending on the harm involved. Where the law requires it, or where someone is at risk, we may report illegal activity to the authorities.
If our checker shows up in your logs
When someone checks your domain with Expiry Watch, our checker opens a TLS connection to your site on port 443, reads the certificate, and closes the connection. It doesn’t request pages, follow redirects, submit forms or test for vulnerabilities. If you have a concern about checks of your domain, email hello@boringutils.com.
Report abuse
If you see the services being misused, tell us at hello@boringutils.com with as much detail as you can. We read every report.