Acceptable Use Policy
Clear standards and prohibited use cases to protect ShortKing users, downstream web visitors, and global internet infrastructure.
1. Purpose & Scope
ShortKing is designed to deliver reliable, transparent URL shortening and click intelligence for developers, creators, and modern teams. To preserve the platform's reputation and ensure safe browsing for all recipients of short links, all users must adhere to this Acceptable Use Policy (AUP).
2. Strictly Prohibited Uses
Phishing & Credential Harvesting
Directing visitors to deceptive web pages designed to mimic login portals, banking interfaces, government portals, or email services to steal credentials, credit card numbers, or sensitive personal data.
Malware, Ransomware & Exploits
Hosting or linking to binary executables, drive-by download exploits, trojans, rootkits, spyware, cryptominers, or browser hijacking payloads.
Unsolicited Communications (Spam)
Distributing ShortKing links through mass unsolicited bulk emails, SMS spam, WhatsApp/Telegram bulk bots, or algorithmic social media comment manipulation.
Server-Side Request Forgery & Internal Probing
Submitting loopback addresses (127.0.0.1, localhost), RFC 1918 private subnets, or cloud hypervisor metadata endpoints (169.254.169.254) to probe internal infrastructure.
Deceptive Cloaking & Malicious Redirects
Configuring destination URLs that conditionally serve clean content to security scanners while serving malicious payloads to human visitors.
3. Enforcement & Immediate Mitigation
Upon detection or receipt of a confirmed violation report, ShortKing administrators take immediate corrective measures, including:
- Immediate link deactivation (routing inbound clicks to a security warning page).
- Eviction and invalidation of Redis cache entries across all edge clusters.
- Blacklisting the destination domain and hashing pattern.
- Immediate suspension of associated developer accounts and API tokens.
Submit a real-time report to our security response operations team.