Acceptable Use Policy

You are strictly prohibited from using XURL to shorten, mask, or redirect to any URLs that contain or promote: (a) malware, ransomware, spyware, or malicious payloads; (b) phishing schemes, credential harvesters, or deceptive landing pages; (c) illegal substances, unauthorized pharmaceuticals, or illicit contraband; (d) copyright infringement or stolen intellectual property; (e) spam campaigns, unsolicited commercial messages, or automated bot traffic.

XURL employs continuous automated threat detection, Google Safe Browsing telemetry, and real-time destination URL inspection. Any shortened link found to resolve to a high-risk or flagged endpoint will be immediately suspended or permanently deleted without prior notice. Repeated submission of non-compliant links will result in an immediate account ban.

Attempting to bypass platform rate limits, probe internal Edge APIs, deploy automated scraping scripts, submit spam custom pricing proposals, or participate in distributed denial-of-service (DDoS) attacks against XURL infrastructure—including automated script hammering of our Data Export engine (/api/user/data-export) or Custom Pricing forms—is strictly prohibited. Submissions to custom pricing endpoints are restricted via sliding-window IP and email rate limits. Violators will have their IP range and device fingerprints added to our perpetual firewall blocklist.

When an account or identity is banned for violating this policy, all active shortened links associated with that identity are permanently revoked. Banned users forfeit all accrued subscription quotas, custom slugs, and analytics history.