Terms
Terms of use
These terms cover throttlebird.com, the launch checker. Have a lawyer read them before you rely on them. They are written in plain language on purpose.
Scans
You may point the scan at a site you operate, a client's site you are launching, or another public URL you are allowed to request. Do not use the scan to break into a system, to overwhelm one, or to pull data you were not already allowed to see. The scan is passive. You still have to follow the law and the site's own rules.
We can refuse a URL or a network that is abusing the scanner. Localhost and private addresses are refused by the software.
Live database tests (whether strangers can read your Supabase or Firebase data) run only after you prove you own the app, by placing a one-time tag or file on it. Without that proof the scan never sends a request to the database. By starting a database test you confirm you own or are authorized to test that app.
What a score is
A score is a summary of the checks this version knows how to run. It is not a penetration test, an audit, or a promise that the app is safe. Missed issues are possible. False positives are possible. You decide what to ship.
Payments
The $9 report is a one-time unlock of a single scan. The $19 plan is a monthly subscription for one saved URL, billed by Stripe. Taxes may be added by Stripe. If a paid scan never produces a report because our service failed, use the contact form and we will refund that charge. Cancel Roost with the contact form. Canceling stops future rescans.
The prompts
Prompts are suggestions for a coding agent. You are responsible for the diff you accept. Do not paste a live secret into a third-party chat. The prompts are written so you do not have to.
Liability
The service is provided as available. To the extent the law allows, we are not liable for lost profits, leaked keys that were already in your bundle, or a launch that went badly. Nothing here limits liability that cannot legally be limited.