Terms of Service

Draft — 8 August 2026

This is an engineering draft, not reviewed by a lawyer. It states the rules we actually intend to operate by, but it is not yet a binding agreement, several sections are deliberately unfinished, and it must be reviewed by qualified counsel before ShipShape accepts real users.

1. What ShipShape is

ShipShape fetches a public web page you specify, runs a set of automated checks against it, and shows you a report with a score and a list of issues.

What it is not: a security audit, a penetration test, a legal or accessibility compliance certification, or professional advice of any kind. The checks are heuristics. A high score does not mean a site is secure, compliant or correct, and a reported issue is a signal to investigate rather than a proven defect. Decisions with real consequences should be based on your own review, not on our score.

2. Using the service

You can run a scan without an account. Creating an account requires a working email address; we sign you in with a magic link rather than a password. You are responsible for keeping access to that mailbox secure, because anyone who can read it can sign in as you.

You must be old enough to enter into a contract where you live, and you may not use ShipShape if we have previously barred you from it.

3. What you may scan

Only scan a URL that you own, that you administer, or that you have permission to test. Scanning causes our servers to send requests to that site, and doing so against a site you have no relationship with can be unwelcome and, depending on the jurisdiction and the volume, unlawful.

You are responsible for that decision. By submitting a URL you confirm you are entitled to have it scanned.

4. Things you must not do

Specifically, you may not:

  • Use ShipShape to generate load against a site you do not control, or as any part of a denial-of-service attempt.
  • Attempt to make the scanner reach private networks, internal hostnames, cloud metadata endpoints, or anything else not publicly reachable. The scanner blocks this; trying to defeat that protection is itself a breach of these terms.
  • Automate the service beyond ordinary use, scrape it, or resell access to it without our written agreement.
  • Attempt to access reports, accounts or data belonging to other people, including by guessing report identifiers.
  • Submit URLs that lead to unlawful material.

5. Reports and share links

You keep whatever rights you have in the sites you scan. We keep the rights in ShipShape itself, including the software and the way reports are presented. You may share and use your own reports freely.

A report link is unguessable but unauthenticated: anyone holding the link can open the report. If you share a link, you have effectively shared the report. This is described in more detail in the Privacy Policy, and it is worth reading before you send one.

6. Availability

ShipShape is pre-release software provided as it is, with no uptime commitment and no service level agreement. It may be unavailable, may lose data, may change substantially, and may be discontinued. Third-party services we depend on can fail independently of us and take parts of the product with them.

We do not promise that a scan will succeed, that its results will be accurate, or that they will be reproducible between runs — a site can change between two scans, and some checks depend on external services that are not always available.

7. Payments

There is currently no paid plan and the service does not accept payments. Pricing shown anywhere on this site is indicative of what is planned and does not create an offer or an obligation on either side.

If paid plans are introduced, the payment, refund and cancellation terms will be written here before any charge can be made, and nobody will be charged without explicitly agreeing to them.

8. Suspension and termination

You can stop using ShipShape at any time, and you can delete your account and its data yourself from the account page. That deletion is immediate and irreversible.

We may suspend or terminate access if these terms are breached — in particular section 3 or 4 — or if required to protect the service or other people. Where it is reasonable to do so, we will say why.

9. Liability

To the extent the law allows, ShipShape is provided without warranties of any kind, and we are not liable for indirect or consequential loss, lost profits, lost data, or for decisions you make on the basis of a report.

Nothing here attempts to exclude liability that cannot lawfully be excluded, and consumer rights that apply where you live are not affected by this section.

The precise wording, and any cap on liability, is one of the parts that needs legal review before these terms take effect.

10. Governing law — not yet decided

The operating entity and the governing jurisdiction have not been settled, so this section is deliberately left incomplete rather than filled with a plausible-looking default. It will be completed, together with the contact details of the operator, before these terms are presented as binding.

11. Changes to these terms

We may update these terms as the product changes. Material changes will be reflected in the date at the top, and continuing to use the service after a change means you accept the updated version.

A contact address will be added before public launch.