Template for the site owner to review with a lawyer before launch. It is not legal advice and the postal address and contact email are placeholders.

Terms of Service

Last updated November 4, 2026.

ShipCheck is a passive checkup for public websites. You may only scan a site you own, or a site you are explicitly authorized to test. Do not point ShipCheck at someone else’s app to hunt for secrets. We rate-limit scans and block requests to private networks.

A checkup fetches public pages and public JavaScript, then makes read-only requests a browser could make with keys the site already ships. ShipCheck does not brute force, fuzz, exploit, write to your database, or store row contents. A clean grade is not a guarantee that the app is secure or correct.

The preview shows a score and issue categories. Full details require an account, a checkup credit, and proof that you control the domain (DNS TXT record, meta tag, or verification file).

New accounts receive one checkup credit. Additional checkups are sold as one-time payments or as monthly allowances on Starter and Pro. One credit pays for one full scan of one app, including scans started by the weekly schedule or a deploy hook. Monthly credits reset each billing period and do not roll over. Purchased credits do not expire. If a scheduled scan has no credit left, ShipCheck skips it and emails you. Refunds of a credit purchase remove unused credits from that purchase. A full refund of a subscription invoice clears that period’s monthly credits.

Subscriptions renew until you cancel in the billing portal. Taxes may apply when you enable Stripe Tax and have an active registration. ShipCheck does not collect tax until that is configured.

The service is provided as-is. We can suspend scanning that threatens other people’s systems or this service. These terms are a product agreement for the MVP and are not a substitute for advice from your own lawyer.