Terms of Service

These terms apply to anyone who accesses or uses Am I Being Pwned? (the "Service"), operated by Am I Being Pwned LLC ("we", "us", "our"). By using the Service you agree to be bound by them. If you are using the Service on behalf of an organisation, you confirm you have authority to bind that organisation to these terms.

If you do not agree to these terms, do not use the Service.

The Service analyses browser extensions and provides risk assessments to help individuals and organisations identify potentially harmful or misconfigured extensions. Reports are based on static analysis, automated tooling, and human expert review where applicable.

Reports are informational only. They represent our assessment based on evidence available at the time of analysis. They are not a guarantee that any extension is safe, or that every risk has been identified. Security research is inherently probabilistic and the threat landscape changes over time.

Some features require you to create an account. You are responsible for keeping your login credentials confidential and for all activity that occurs under your account.

You must notify us immediately at hello@amibeingpwned.com if you believe your account has been compromised.

You must provide accurate information when registering. Accounts may not be shared or transferred without our written consent.

You agree not to:

• Use the Service for any unlawful purpose or in violation of any applicable law or regulation.
• Attempt to probe, scan, or test the vulnerability of our systems without prior written authorisation.
• Scrape, crawl, or systematically extract data from the Service by automated means without our consent.
• Circumvent any rate limits, access controls, or usage quotas.
• Use the Service to harass, defame, or harm extension developers based on inaccurate or misrepresented findings.
• Resell or sublicense access to the Service without our written consent.

We reserve the right to suspend or terminate access for any violation of these terms without notice.

If you are a browser extension developer and believe a report about your extension contains an inaccurate finding, contact us at hello@amibeingpwned.com with supporting evidence. We aim to respond within two business days.

If a report inadvertently discloses an unpatched vulnerability in your extension, email vulnerabilities@amibeingpwned.com immediately. We will temporarily unpublish the relevant findings while you issue a fix.

All content produced by the Service - including risk reports, extension analyses, risk scores, and written assessments - is owned by Am I Being Pwned LLC and protected by copyright.

You may use reports internally for security decision-making, compliance, or legal review. You may not republish, redistribute, or resell reports or analysis without our prior written consent.

Nothing in these terms transfers any intellectual property rights to you.

The Service is provided "as is" and "as available" without warranties of any kind, express or implied. We do not warrant that the Service will be uninterrupted, error-free, or that every security risk will be identified.

Security analysis involves judgement and is not infallible. Reports should be used as one input to your security programme, not as a sole or definitive source of truth.

To the fullest extent permitted by applicable law, Am I Being Pwned LLCwill not be liable for any indirect, incidental, consequential, or punitive damages arising from your use of or inability to use the Service, including loss of profits, data, or goodwill.

Our total liability for any claim arising under these terms is limited to the greater of the amount you paid us in the 12 months preceding the claim, or £100.

Some jurisdictions do not allow limitations on liability. Where applicable law requires a higher standard, that standard applies instead.

You may stop using the Service and delete your account at any time. Deletion requests can be made by emailing hello@amibeingpwned.com.

We may suspend or terminate your access immediately if we reasonably believe you have violated these terms, without prejudice to any other remedies available to us.

On termination, sections covering intellectual property, disclaimers, limitation of liability, and governing law survive and continue to apply.

These terms are governed by the laws of England and Wales. Any disputes arising under or in connection with them will be subject to the exclusive jurisdiction of the courts of England and Wales.

We may update these terms from time to time. If we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify users by email.

Continued use of the Service after the effective date of any changes constitutes acceptance of the updated terms. If you do not agree to the revised terms, stop using the Service.

Questions about these terms can be directed to hello@amibeingpwned.com.