1. What this service does
Curlok gives you a unique URL that captures and displays any HTTP request sent to it, so you can inspect and debug webhooks and API calls. Anyone who knows a given endpoint URL can view the requests captured by it — the URL is the only access control. Treat every endpoint URL as public.
2. Information we handle
- Captured request data — whatever a sender transmits to your endpoint: HTTP method, headers, query string, body, the originating IP address, and the User-Agent. We store this so you can view it.
- Account data (optional) — if you create an account, your email address and a hashed password. We never store your password in plain text.
- Basic operational logs — timestamps, IP addresses, and event types, used to run, secure, and monitor the service.
3. No guarantees about your data
We make no guarantee whatsoever regarding your data. Without limitation, we do not guarantee that data will be stored, retained, kept private, kept secure, kept accurate, or remain available. Captured requests, endpoints, and accounts may be deleted, expired, truncated, or lost at any time, without notice and without liability. Do not use this service as a store of record or for anything you cannot afford to lose.
4. Do not send sensitive information
Because endpoint URLs are effectively public and data is not guaranteed to be private, you must not send passwords, API keys, tokens, personal data, payment details, health information, production secrets, or any other sensitive or confidential information to an endpoint. Anything you send is at your own risk.
5. Limitation of liability
To the fullest extent permitted by law, Curlok, its operators, and its contributors are not liable for anything arising from your use of the service — including but not limited to data loss, data exposure, downtime, corruption, unauthorized access, business loss, or any direct, indirect, incidental, special, or consequential damages. You use the service entirely at your own risk.
6. Your responsibilities
- You are responsible for everything sent to and done with your endpoints.
- You must not use the service for anything unlawful, abusive, or that harms others or their systems.
- You must comply with all laws and third-party terms that apply to your use.
8. Changes
We may change this policy or the service at any time, without notice. Continued use after a change means you accept it.
9. Contact
Questions about this policy? Email hello@curlok.com.
This document is a general template provided for convenience and is not legal advice. You should have a qualified lawyer review it for your jurisdiction before relying on it.