Policy

Acceptable use policy

Last updated 2026-10-20T00:00:00.000Z

The registry is for tools and guides that support lawful investigation: due diligence, threat intelligence, journalism, security research and similar work, using publicly available or properly licensed data.

Not allowed

• Tools designed to track, monitor or harass a specific private individual, or stalkerware of any kind.
• Credential stuffing, password spraying, account takeover, or tools that use leaked credentials to log in.
• Tools whose main purpose is evading CAPTCHAs, bot detection or platform bans.
• Exploits or tools for unauthorized access to systems.
• Tools that bundle or redistribute leaked databases or illegally obtained personal data.
• Malware, cryptominers, telemetry the README does not disclose, or obfuscated code without a stated reason.
• Impersonation of other tools, vendors, agencies or people.

Guides

• Examples use fictional data, the author’s own data, or public figures in their public role. No guides built around a real private individual.
• No step-by-step instructions for anything this policy prohibits (stalking, account takeover, evading platform bans).
• Guides whose techniques touch personal data include a short scope and legal note.

Honest descriptions

Each tool declares whether it contacts the target, logs in to accounts and collects personal data. Reviewers check these answers; wrong ones are a policy violation.

Enforcement

Reviewers check every new publisher’s first release. After that, reports from anyone can lead to a fix request, a yanked or removed version, a suspended namespace or a banned account. See reports and takedowns.