Terms of Service

Last updated: July 17, 2026

These Terms of Service ("Terms") govern your access to and use of xocipher.com (the "Site"), any software, scripts, or tools made available by Xocipher (the "Tools"), and any privacy, hardening, or protection services offered by Xocipher (the "Services"). Xocipher is operated by an individual developer based in Sweden. By accessing the Site, using the Tools, or engaging the Services, you agree to be bound by these Terms. If you do not agree, do not use the Site, the Tools, or the Services. Where a separate Services Agreement or End User License Agreement applies, that document governs in the event of a conflict on its subject matter.

1. About Xocipher

Xocipher is an independent, solo security practice. It provides (a) an informational website; (b) software tools aimed at security researchers and bug bounty hunters, including recon automation and report-writing utilities; and (c) defensive privacy and security services for individuals and organizations, including privacy migration, device hardening, and threat-model consultation. The Tools and the Services are separate offerings and may be governed by additional documents referenced in these Terms.

2. Eligibility

You must be at least 18 years old, or the age of legal majority in your jurisdiction if higher, and have the legal capacity to enter into these Terms, to use the Site, the Tools, or the Services.

3. Acceptable Use of the Tools

The Tools are dual-use security software: the same recon, scanning, and reporting capabilities that are useful for authorized security research can cause harm if misused. By using any Tool, you agree that you will only use it:

• against systems, networks, or applications that you own; or
• against systems, networks, or applications for which you have obtained explicit, documented, prior authorization to test (for example, assets that are explicitly in-scope under a bug bounty or vulnerability disclosure program you are enrolled in); and
• in compliance with all applicable laws, including but not limited to computer misuse and unauthorized access laws in your jurisdiction (such as Sweden's brottsbalken provisions on dataintrang, the U.S. Computer Fraud and Abuse Act, or the UK Computer Misuse Act, as applicable), and in compliance with the rules of any program under which you are testing.

You agree that you will not use any Tool to:

• access, scan, attack, or disrupt any system without proper authorization;
• develop or deploy malware, ransomware, or other software intended to cause damage;
• violate the privacy, intellectual property, or other rights of any third party;
• violate the terms of any bug bounty or vulnerability disclosure program; or
• violate any applicable local, national, or international law or regulation.

You are solely responsible for determining whether your intended use of a Tool is lawful and authorized. Xocipher provides no legal advice and makes no representation that using a Tool is lawful in your specific circumstances.

4. Scope of the Services

The Services are defensive privacy and security work performed for lawful clients, on the client's own accounts, devices, and data, and only with the client's explicit prior authorization (see the Client Authorization and the Services Agreement). To be clear about what Xocipher does and does not do:

• Xocipher does provide defensive services such as privacy migration, device and account hardening, and threat-model consultation, on assets the client owns or controls.
• Xocipher does not perform penetration testing, red teaming, offensive testing, or any intrusion, scanning, or attack against systems belonging to third parties, on behalf of any client.
• Xocipher does not assist with, and will refuse, any request whose purpose is to evade the law, stalk or surveil another person, or conceal unlawful activity.

5. Client Responsibilities

When you engage the Services, you represent, warrant, and agree that:

• you own, or are fully authorized to control, every account, device, and dataset you ask Xocipher to work on, and you have granted written authorization to do so;
• the information you provide is accurate and complete;
• you have made your own independent backups of any data before work begins, and you understand that configuration changes, migrations, and hardening can carry a risk of data loss or disruption;
• you will not ask Xocipher to access or modify anything belonging to another person without that person's documented authorization; and
• you remain responsible for your own accounts, credentials, and lawful conduct.

6. No Guarantee of Results

Privacy and security are ongoing and adversarial. Xocipher uses reasonable professional skill and care, but does not guarantee any specific outcome. Without limitation, Xocipher does not guarantee that all of your data will be removed from, or will stay removed from, every data broker or search site; that you will not be affected by a breach, hack, phishing attempt, scam, or identity theft; that any tool, provider, or configuration will be free of vulnerabilities; or that a given result will persist over time. Any timelines, coverage estimates, or examples are indicative only and are not promises.

7. Assumption of Risk

You acknowledge that Xocipher works on systems, accounts, and data whose prior state, contents, and configuration Xocipher did not create and cannot fully verify. Xocipher is not responsible for issues, damage, data loss, lockouts, or vulnerabilities that pre-existed an engagement, that arise from your own systems, providers, or actions, or that arise from third-party products or services outside Xocipher's control. You engage the Services understanding and accepting these inherent risks.

8. Third-Party Products & Services

Xocipher may recommend or help you set up independent third-party products and services (for example Proton, Mullvad, GrapheneOS, NextDNS, or YubiKey). These are provided by their own vendors under their own terms and privacy policies. Xocipher is not their agent and is not responsible for their availability, security, pricing, conduct, outages, or any breach on their side. Unless expressly stated otherwise on the Site, Xocipher earns no commission from a recommendation; where an affiliate relationship exists, it is disclosed.

9. No Professional Advice

Nothing on the Site, in the Tools, or provided through the Services is legal, financial, tax, or other professional advice, and no such professional relationship is created. Information is general in nature. For advice specific to your situation, consult a qualified professional.

10. Purchases, Withdrawal & Refunds

Paid Tools (such as Redline) and paid Services are sold at the prices displayed at the time of purchase. Recurring Services renew periodically until cancelled and can be cancelled at any time for future billing periods.

Consumer right of withdrawal (EU/EEA). If you are a consumer in the EU or EEA, you generally have a 14-day right to withdraw from a distance contract. Two important exceptions apply:

• Digital content (downloadable Tools). By starting the download or use of a Tool, you expressly request immediate performance and acknowledge that you thereby lose your right of withdrawal for that Tool.
• Services started at your request. If you ask Xocipher to begin a Service before the 14-day period ends, you expressly consent to that and acknowledge that once the Service is fully performed you lose the right of withdrawal; if you withdraw while a Service is partly performed, you may owe a proportionate amount for work already done.

Except where the law or a specific offer provides otherwise, fees for delivered digital content and performed Services are non-refundable. Statutory consumer rights, including any mandatory refund rights, are not affected by this section.

11. Disclaimer of Warranties

THE SITE, THE TOOLS, AND THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR THAT THE TOOLS OR SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE. NOTHING IN THIS SECTION LIMITS ANY WARRANTY OR GUARANTEE THAT CANNOT BE EXCLUDED UNDER MANDATORY LAW, INCLUDING CONSUMER LAW APPLICABLE TO YOU.

12. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, XOCIPHER AND ITS OPERATOR SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF DATA, PROFITS, GOODWILL, OR BUSINESS, ARISING OUT OF OR IN CONNECTION WITH THE SITE, THE TOOLS, OR THE SERVICES, INCLUDING ANY DAMAGE OR LEGAL CONSEQUENCE ARISING FROM YOUR OWN MISUSE OF A TOOL OR FROM MISUSE BY ANY THIRD PARTY WHO OBTAINS A TOOL, WHETHER OR NOT XOCIPHER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. WHERE LIABILITY CANNOT BE FULLY EXCLUDED, XOCIPHER'S TOTAL AGGREGATE LIABILITY FOR ANY CLAIM ARISING FROM THESE TERMS, A TOOL, OR A SERVICE SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID XOCIPHER FOR THE RELEVANT TOOL OR SERVICE IN THE SIX (6) MONTHS PRECEDING THE CLAIM, OR (B) 1,000 SEK. NOTHING IN THESE TERMS EXCLUDES OR LIMITS LIABILITY FOR DEATH OR PERSONAL INJURY CAUSED BY NEGLIGENCE, FOR FRAUD, FOR GROSS NEGLIGENCE OR INTENTIONAL MISCONDUCT, OR FOR ANY LIABILITY THAT CANNOT BE LIMITED UNDER MANDATORY LAW.

13. Indemnification

To the extent permitted by law, you agree to indemnify, defend, and hold harmless Xocipher and its operator from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to: (a) your use or misuse of the Site, any Tool, or any Service; (b) your violation of these Terms, including the Acceptable Use provisions in Section 3 and the Client Responsibilities in Section 5; (c) your violation of any law or the rights of any third party, including asking Xocipher to act on an account or device you were not authorized to control; or (d) any unauthorized or unlawful use of a Tool by you or by any third party to whom you provided, sold, or made a Tool available. This section does not apply to the extent a claim results from Xocipher's own gross negligence or intentional misconduct, or where it would be unenforceable against you as a consumer under mandatory law.

14. Intellectual Property

The Site, its content, and the Tools (excluding third-party components referenced in Section 15) are the property of Xocipher and are protected by applicable intellectual property laws. Use of a Tool does not transfer ownership of it to you. Where a Tool is distributed under a specific software license (for example, an open-source license or the terms in a separate End User License Agreement), that license governs your rights to use, modify, or redistribute it.

15. Third-Party Components

The Tools may incorporate, wrap, or rely on third-party open-source software (for example, subfinder, httpx, dnsx, naabu, katana, and nuclei). Each such component remains subject to its own license terms, and you are responsible for complying with those terms in addition to these Terms.

16. Suspension, Termination & Right to Refuse

Xocipher may decline, suspend, or terminate access to the Site, any Tool, or any Service, or revoke any license, at any time, if Xocipher reasonably believes you have violated these Terms (in particular Section 3 or Section 4), if an engagement appears intended for an unlawful or harmful purpose, or as otherwise necessary to comply with the law. Where you have prepaid for a Service that Xocipher terminates without cause on your part, Xocipher will refund the unused portion.

17. Governing Law & Disputes

These Terms are governed by the laws of Sweden, without regard to conflict-of-law principles. Disputes shall be subject to the courts of Sweden, except that, if you are a consumer, you keep the benefit of the mandatory consumer-protection rules and the jurisdiction of the courts of your country of residence where the law so provides. Consumers in the EU may also use the European Commission's Online Dispute Resolution platform at ec.europa.eu/consumers/odr.

18. Changes, Severability & Contact

Xocipher may change, suspend, or discontinue the Site, any Tool, or any Service, and may update these Terms from time to time; the "Last updated" date above reflects the most recent revision, and continued use after changes take effect constitutes acceptance. If any provision is found unenforceable, it will be limited or removed to the minimum extent necessary and the rest will remain in force. Questions about these Terms can be sent to contact@xocipher.com.