Terms of Service
Version 1.1 · Effective October 30, 2026
ShadowHare End User License Agreement
These terms are the agreement between you and Aeroware LLC ("ShadowHare", "we", "us"), the operator of the ShadowHare website and change-monitoring service at shadowhare.com and app.shadowhare.com. They cover the web app, the capture service, site agents, the ShadowHare browser extension and everything else we provide under the ShadowHare name.
1. Accepting these terms
1.1 You accept these terms when you create an account, join an organisation, or click to accept them when you sign in. If you do not accept them, do not use ShadowHare.
1.2 If you accept on behalf of a company or other organisation, you confirm you have authority to bind it, and "you" means that organisation as well as you.
1.3 You must be at least 18 years old and able to enter a binding contract.
1.4 Each version of these terms has a version number and an effective date, shown on our Terms page. When we publish a new version, you are asked to accept it the next time you sign in. Until you do, you cannot keep using the Service.
2. Definitions
| Term | Meaning |
|---|---|
| Service | ShadowHare's web app, capture service, alert emails, reports, site agents, browser extension, and related documentation and support. |
| Account | A person's sign-in to the Service. |
| Individual account | An account on the Individual plan, used by one person with any email address. |
| Organisation | A Business customer: a group of accounts on its own email domain, with its own database, logs and screenshots. |
| Super User | The account that owns an Organisation and manages its members, plan and billing. |
| Job | A page (visual job) or an API endpoint (API job) you ask ShadowHare to check on a schedule. |
| Capture | What a check records: a screenshot of a page, or an API's response, status and timing. |
| Target | The website, page, API or device a Job checks. |
| Site Agent | ShadowHare software you install on your own network so Jobs can reach addresses only that network can see. |
| Extension | The ShadowHare browser extension, which sends a page's address and cookies to your ShadowHare account. |
| Customer Data | Everything you or your members put into the Service or that it captures for you: Jobs, settings, cookies, request headers and bodies, Captures, logs and alert recipients. |
3. Accounts and organisations
3.1 Give accurate details when you sign up and keep them current. Confirm your email address before you use the Service.
3.2 An Individual account is for one person. Do not share its sign-in.
3.3 An Organisation is set up on an email domain you control. Its Super User is responsible for who joins, the roles they hold (Super User, Admin, User or Viewer), and everything its members do in the Service.
3.4 Keep your password and two-factor codes secret. An Organisation may require two-factor sign-in for all its members. Tell us at once at [email protected] if you think someone else has used your account.
3.5 You are responsible for all activity under your account and, for an Organisation, under its members' accounts, except where it results from our own failure to keep the Service secure.
3.6 Our support staff can see your account and Customer Data to run the Service and to answer your requests. They do not sign in as you, and what they change is recorded.
4. Plans, trials and billing
Prices are in US dollars per month and exclude taxes unless we say otherwise. Current prices are on shadowhare.com. On the date of these terms they are:
| Individual | Business | |
|---|---|---|
| Monthly price | $20 | $250 |
| Jobs included | 10, visual or API in any mix | 25 visual and 25 API |
| More jobs | 5 more for $10 a month per pack | $1 a month per job past 25 of a type |
| Site Agents | Not available | 5 included, then $5 a month each |
| Stored captures | Up to 10 GB | 100 GB included, then $0.25 per GB a month on the daily average, or the oldest screenshots removed instead, as you choose |
| Shortest schedule | Visual every 10 min, API every 5 min | Visual every 5 min, API every 1 min |
4.1 Trial. Each plan starts with a 14-day free trial, with no card needed. During it the plan's included amounts are hard limits and nothing extra is billed. If you do not subscribe by the end of the trial, captures stop and your account is handled as in section 12.
4.2 Paying. Payments are taken by Stripe; we never see or store your full card number. Subscriptions renew automatically each month until cancelled.
4.3 Extras. On Business, extra jobs and Site Agents are added to your subscription when you create them and removed when you delete them, charged pro rata to the day. A disabled job still counts, because its screenshots and logs are kept.
4.4 Failed payments. If a payment fails, Stripe retries it. While retries remain, your account carries on. If the last retry fails, captures stop and your account is queued for deletion as in section 12, unless you pay first.
4.5 Cancelling. You can cancel at any time. You keep full access until the end of the period you have paid for; then captures stop.
4.6 Refunds. Fees already paid are not refunded, including for part-used months, except where the law requires it or where we end the Service for you without cause (then we refund the unused part of a prepaid period).
4.7 Price changes. We give at least 30 days' notice by email before a price increase applies to you. It takes effect from your next billing period after the notice ends.
5. Acceptable use
ShadowHare visits Targets on your behalf, so what it does there is your responsibility. You may only point a Job at a Target that you own, that you are authorised to monitor, or that is publicly available and whose terms allow automated access of this kind.
5.1 You must not use the Service to:
- (a) reach a Target you are not authorised to access, or get round a login, paywall, CAPTCHA, rate limit or other access control you have no right to pass;
- (b) use cookies, session tokens, passwords or API keys that belong to someone else or that you are not entitled to use;
- (c) place a load on a Target that could harm it, including running many Jobs against one Target to check it more often than your plan's schedules allow;
- (d) collect personal data unlawfully, or monitor a person, rather than a site, for stalking, harassment or surveillance;
- (e) break any law, or any contract or terms of service that apply to you or to a Target;
- (f) send alert emails to people who have not agreed to receive them;
- (g) scan, probe or attack networks or systems, including ShadowHare's own, or test them for weaknesses without our written permission;
- (h) reverse engineer, overload or interfere with the Service, or try to reach another customer's data;
- (i) resell or provide the Service to others as a service of your own without our written agreement.
5.2 Captures from ShadowHare's own network can only reach public internet addresses. Reaching private networks is what Site Agents are for (section 6).
5.3 If you turn on Accept bad certificates for a Job, ShadowHare loads the Target even when its HTTPS certificate is invalid. The connection may then not be private. Use it only for Targets you trust.
5.4 We may pause a Job, an account or an Organisation that breaks this section, or that a Target's owner credibly complains about, while we look into it (section 12).
6. Site Agents
A Site Agent lets Jobs reach addresses on your own network. It connects out from your network to ShadowHare over TLS on port 443, and ShadowHare's capture service sends those Jobs' traffic through it.
6.1 Install a Site Agent only on a network and machine you own or are authorised to connect to ShadowHare. You are responsible for that authorisation and for the machine it runs on.
6.2 A Site Agent only reaches the addresses on its allow-list. You decide that list, and you are responsible for what it lets ShadowHare reach. Keep it to what your Jobs need.
6.3 Traffic through a Site Agent comes from your network and your internet address. Targets and your own security tools see it as yours.
6.4 We record how many connections each agent makes and how much data it carries, and keep those records for up to 400 days. We also record which addresses it reached, kept for 30 days. We use these records to run, secure and bill the Service.
6.5 We may require a minimum agent version. An older agent is disconnected until you update it, usually because the update fixes a security problem. Updates are signed by us.
6.6 We may disconnect or remove a Site Agent at any time if we believe it is compromised, misused, or putting the Service or another network at risk. Your Organisation can then add a new one.
6.7 The Site Agent software is licensed to you under section 11 for use with the Service only.
7. The browser extension
The Extension sends the page you are on, and your cookies for that site, to your ShadowHare account so that a Job can see the page as you do, signed in.
7.1 It reads cookies only when you click one of its buttons, only for the site in that tab, and sends them only to the ShadowHare address set in its settings. It never puts them in a web address.
7.2 Until ShadowHare receives them, it holds them in your browser for at most 10 minutes. It deletes them once they are delivered or the tab is closed.
7.3 Create a job saves the cookies to the new Job, encrypted. Wizard uses them to load the page once and does not keep them unless you then create a Job. Export cookies saves them as a file on your computer, which you are responsible for keeping safe.
7.4 Cookies work as a sign-in. Send ShadowHare only cookies for your own sessions on sites you are allowed to monitor (section 5). A site may sign out a session that is used from somewhere else.
7.5 The Extension is licensed to you under section 11. Its listing in the browser's store also shows the permissions it uses and why.
8. Your data
8.1 You own your Customer Data. You give us a licence to store, copy, process and display it only as needed to provide the Service to you, keep it secure, and meet our legal obligations. We do not sell it, and we do not use your Captures for any other purpose.
8.2 We keep Customer Data for these periods, then delete it automatically:
| Data | Individual | Business |
|---|---|---|
| Screenshots and API responses | 30 days, and at most 10 GB (oldest removed first) | 90 days; past 100 GB, billed or oldest removed, as you choose |
| Job logs | 31 days | 90 days |
| Audit log (sign-ins, settings changes) | 1 year | 7 years |
| Site Agent records | Not applicable | Traffic 400 days; addresses reached 30 days |
8.3 You are responsible for having the right to give us your Customer Data, including anything a Job captures from a Target, and for any personal data in it.
8.4 Cookies, API request headers and request bodies are encrypted at rest and are never shown back in the browser once saved.
8.5 You can export job logs and reports while your account is active. Download anything you want to keep before deleting a Job or your account.
8.6 Deleting a Job deletes its screenshots. Deleting a member deletes their Jobs, Captures and logs. Payment records are kept, without the link to the account, as tax and accounting law requires.
8.7 We may use anonymous, aggregated figures about how the Service is used (for example, how many checks run) to operate and improve it. They never identify you, your Targets or your Captures.
9. Privacy and security
9.1 Our Privacy Policy at shadowhare.com/privacy explains what personal data we collect about you and your members, and why. It forms part of these terms.
9.2 For personal data inside your Customer Data, you are the controller and we process it for you, only to provide the Service and on your instructions. A data processing agreement is available on request from [email protected].
9.3 Each Business Organisation has its own database and its own log indexes, and its screenshots are stored apart from every other customer's. Sign-in supports two-factor authentication.
9.4 We use these service providers to run ShadowHare: Stripe (payments), Proton (alert and account emails) and ServerStadium (server rack and network infrastructure). We give each only what it needs for its part, and list changes on our Privacy Policy.
9.5 If we learn of a security incident that exposes your Customer Data, we tell you without undue delay, with what we know and what we are doing about it.
9.6 No system is perfectly secure. Keep your sign-ins safe (section 3) and send us only what your Jobs need.
10. Availability and alerts
We run ShadowHare to check every Job on schedule and to fail over between capture servers when one stops, but we do not promise that every check runs or every alert arrives.
10.1 A check can run late or not at all, for example during maintenance, a failover, an outage at a Target or our providers, or when a Site Agent is offline.
10.2 Change detection compares Captures against the sensitivity and exclusion zones you set. It can report a change that does not matter, or miss one that does. Pages that differ on every load (adverts, clocks, rotating content) may need exclusion zones.
10.3 Alert emails depend on your recipients' email providers, which may delay, filter or reject them.
10.4 ShadowHare is not designed for, and must not be your only safeguard for, uses where a missed or late alert could cause death, injury, or serious environmental or financial harm.
10.5 We may change or remove features, giving reasonable notice of a change that takes away something you rely on. We plan maintenance for quiet hours where we can.
10.6 There is no service level agreement unless we sign one with you separately.
11. Licence and intellectual property
11.1 While your account is active and you follow these terms, we give you a limited, non-exclusive, non-transferable, revocable licence to use the Service, and to install and run the Extension and Site Agent software, for your own or your Organisation's internal business purposes.
11.2 You must not copy, modify, sell or distribute the software; decompile, disassemble or reverse engineer it, except where the law allows this despite these terms; remove our notices; or use it to build a competing product.
11.3 Open-source components included in the software are licensed under their own licences, which take priority for those components.
11.4 ShadowHare, its software, design, logos and documentation belong to us or our licensors. These terms give you no other rights in them.
11.5 If you send us ideas or feedback, we may use them without any obligation to you.
12. Suspension and termination
12.1 By you. You can cancel your subscription at any time (clause 4.5), and ask us to delete your account or Organisation straight away by writing to [email protected] from its owner's email address.
12.2 By us. We may suspend or end your access, or pause particular Jobs or Site Agents, if you break these terms, if a payment fails for good, if the law or a court requires it, or if your use puts the Service, other customers or a Target at risk. Where it is reasonable, we tell you first and give you a chance to fix the problem.
12.3 What happens next. When a trial ends without a subscription, a subscription is cancelled or a final payment fails, captures stop and your account is queued for deletion 45 days later. We email reminders before that date. Subscribing again before it restores everything as it was.
12.4 Deletion. On the deletion date, we delete your Customer Data: the Organisation's database, job logs, audit logs, screenshots and Site Agent records, or an Individual account's Jobs, Captures and logs. Copies in backups are overwritten within 30 days. This cannot be undone.
12.5 Clause 8.6, clauses 11.2 to 11.5, and sections 13 and 14 continue after these terms end, as do any fees you owe.
13. Disclaimers, liability and indemnity
13.1 As is. Apart from what these terms say expressly, the Service, the Extension and the Site Agent software are provided "as is" and "as available". To the extent the law allows, we disclaim all other warranties, including merchantability, fitness for a particular purpose, non-infringement, and that the Service will be uninterrupted, error-free or detect every change.
13.2 Indirect losses. To the extent the law allows, neither party is liable for lost profits, revenue, business or data, or for indirect, incidental, special, consequential or punitive damages, even if told they were possible.
13.3 Cap. To the extent the law allows, each party's total liability arising out of these terms in any 12 months is limited to the fees you paid us in the 12 months before the event that caused it, or $100 if that is more.
13.4 Exceptions. Clauses 13.2 and 13.3 do not limit your duty to pay fees, your obligations under clause 13.5, either party's liability for breaking section 5 or the other's intellectual property rights, or any liability that the law does not allow to be limited, such as for death or personal injury caused by negligence, or for fraud.
13.5 Your indemnity. You will defend and compensate us against claims by third parties, including a Target's owner, arising from your Jobs, your Customer Data, your Site Agents, or your breaking section 5. We will tell you promptly about such a claim and let you control its defence, and you will not settle it in a way that admits fault on our part without our consent.
13.6 Consumers. If you use ShadowHare as a consumer, these terms do not take away rights that consumer law gives you and that cannot be excluded.
14. Changes, law and general terms
14.1 Changes. We may update these terms. A new version gets a new version number and effective date on our Terms page, and you accept it at your next sign-in (clause 1.4). For a change that reduces your rights, we email account owners at least 30 days before it takes effect; if you do not agree, you can cancel before then and we refund any prepaid fees for the time after it takes effect.
14.2 Governing law. These terms are governed by the laws of the State of New York, without regard to its conflict-of-law rules. The state courts located in Monroe County, New York, and the United States District Court for the Western District of New York have exclusive jurisdiction over any dispute, except that either party may seek urgent relief to protect its rights in any court.
14.3 Notices. We send notices to the email address of the account owner or Super User. You send notices to [email protected].
14.4 Assignment. You may not transfer these terms without our written consent. We may transfer them to a company that takes over ShadowHare, and will tell you if we do.
14.5 Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, such as outages at internet or hosting providers, natural disasters or government action. This does not excuse fees owed.
14.6 Whole agreement. These terms, our Privacy Policy and any order or agreement we sign with you are the whole agreement about ShadowHare. If a signed agreement conflicts with these terms, the signed agreement wins.
14.7 Other points. If any part of these terms cannot be enforced, the rest still applies. Not enforcing a right is not giving it up. Nothing in these terms makes either party the other's partner, agent or employee.
Contact
Aeroware LLC · [email protected]
