Terms of use

tunl gives sites running on your own computer a temporary public address on *.tunl.site. You are responsible for everything your tunnels serve.

• ✗ spread malware, viruses or any software meant to harm or take over computers;
• ✗ phish: imitate another company or person to collect logins, payment details or personal data;
• ✗ run scams, fraud or spam, or host content that is illegal where you or your visitors are;
• ✗ attack, scan or overload other systems, or hide where such traffic comes from;
• ✗ get around plan limits or blocks, for example by opening many free accounts.

• • Visitors may see a warning page before your site, depending on your plan.
• • Some plans block downloads of programs, such as .exe files and installers.
• • Tunnel addresses cannot use names of well-known brands or words common in phishing.
• • We keep a log of requests to your tunnels for 14 days: the address and path (without the query string), response status, type and size, the visitor's IP address and the time. Apart from captured webhooks (below), we never store what is sent through your tunnels. We use the log to investigate abuse reports.
• • We may close tunnels, block addresses and suspend accounts that break these terms, without notice or refund.

• • On plans with webhook capture, we keep the webhooks sent to your tunnels (POST, PUT, PATCH and DELETE requests from servers, not from browsers) with their headers and up to 1 MB of their body, and the start of your site's response, so you can inspect and replay them.
• • We never keep requests from browsers, or Authorization and cookie headers. Captures are stored encrypted, and only you can see them.
• • They are deleted when you stop the tunnel, and after 7 days at the latest.
• • If you choose to hold webhooks while your tunnel's connection is down, tunl answers them with 202 Accepted and delivers them when it reconnects. A request can then reach your site more than once.
• • Webhooks can contain personal data about your customers. You are responsible for having a lawful basis to receive it, for example under Oman's Personal Data Protection Law.