Terms of Service
Last updated 23 June 2026
These terms are an agreement between you and Dutchcode B.V., which operates Blinkof.ai ("we", "us"). By using Blinkof.ai, you agree to them. If you don't agree, please don't use the service.
1. What Blinkof.ai does
Blinkof.ai tests web apps and returns a report or grade. We offer it three ways:
- Instant grade — paste any URL and we read what's publicly available (response headers, the code your site already ships to browsers, SEO tags, third-party trackers, and any linked privacy policy) and return a grade. This is read-only: we don't sign up, submit forms, or touch anything private.
- Full test — for an app you've verified you own or control, we drive it the way a real user would: loading pages, submitting forms, trying hostile input, and (where applicable) creating and then deleting a temporary test account.
- Test logins — if you save a login for your own app, a deep test signs in with it to test behind your login (free, once you've verified you own the site).
The report and grade are automated guidance, not a guarantee.
2. You must be authorised to run the full test
The full test actively probes the target — this is active testing, not passive browsing. You may only run it on a URL that you own or are explicitly authorised to test, and Blinkof requires ownership verification before it runs the deep scan. By submitting and verifying it, you confirm you have that permission, and you are solely responsible for ensuring it is allowed. (The instant grade reads only public information, like a browser or search engine would.)
You must not use Blinkof.ai to scan, probe, or attack any site or system you don't have permission to test, to break any law, or to disrupt anyone's service. We may refuse, throttle, or block any scan, and may report serious abuse.
3. Instant grades & shareable scorecards
An instant grade is generated from public information about a site and gets its own shareable page and preview image. We don't publish the specific contact details we may read from a page. If a grade is about a site you own and you'd like it taken down, email support@dutchcode.com and we'll remove it.
4. Test logins
If you save a test login for one of your apps, a deep test signs in with it to test behind your login. By saving a login you confirm the account is yours or you're authorised to use it for testing, and you're responsible for what it can see and do. We strongly recommend a dedicated, low-privilege test account — not an admin account or one tied to real customer data. We store the password encrypted and use it only to run your tests; we never delete or change the account, and you can remove a saved login at any time. See our Privacy Policy for how it's stored.
5. Acceptable use
- Don't use Blinkof.ai for anything illegal or to harm others.
- Don't try to overwhelm, reverse-engineer, or break Blinkof.ai itself.
- Don't resell or pass off the service as your own without our agreement.
- Don't run the full test on sites you aren't authorised to test.
- Don't save a test login for an account you aren't authorised to use.
6. Your account
You sign in through Google or GitHub. You're responsible for activity under your account and for keeping access to your sign-in provider secure. You must give accurate information and be old enough to enter this agreement (at least 16).
7. Plans, billing & cancellation
- Paid plans (Pro, Studio) are billed in advance through Stripe and renew automatically each period until you cancel.
- Credits are one-time purchases and are consumed as you run deep scans.
- Prices are shown before applicable taxes, which Stripe may add at checkout.
- You can cancel a subscription at any time in the Stripe billing portal; it stays active until the end of the paid period, and we don't pro-rate partial periods unless the law requires it.
- Prices may change with notice; changes won't affect the period you've already paid for.
8. The verified badge
If your app earns a Blinkof.ai badge, you may display it on that app while the grade is accurate. The badge and the eye mark remain ours; we may update how the badge looks or works, and we may withdraw the right to display it if it's used misleadingly.
9. Intellectual property
Blinkof.ai, its software, brand, and the eye mark are ours. Your app, your data, and the report we produce for you are yours — we just need the rights to process them to provide the service.
10. Confidentiality
We treat what we learn about your app — your report, the issues we find, and anything behind your login — as confidential, and we don't share it except with the processors that run the service (see our Privacy Policy) or where the law requires it. In return, please keep any non-public details of how Blinkof.ai works confidential too.
11. Data processing
When a test makes us process personal data on your behalf — for example data that sits behind your login — you are the controller of that data and we are your processor. We process it only on your instruction, to run your test and produce your report; we keep it secure, don't use it for anything else, and delete or anonymise it as set out in our Privacy Policy. You confirm that letting us process that data is lawful and doesn't infringe anyone's rights. Our service isn't built for special categories of personal data (such as health, biometric, or government-ID data) — please don't point a test at an app holding that behind its login. We rely on the sub-processors listed in our Privacy Policy and will tell you if that list changes; if a security breach affects data we process for you, we'll let you know without undue delay. For everything else — your account, billing, and the public grade — we act as our own controller.
12. No warranty
Blinkof.ai is provided "as is" and "as available". A scan is a best-effort, automated pass — we test with reasonable care, but it's an effort, not a guaranteed result: it can miss issues and can report false positives, and it is not a substitute for a professional security audit, penetration test, or legal review. Findings about privacy, GDPR, or accessibility are informational and are not legal advice. We don't warrant that the service will be uninterrupted, error-free, or that fixes we suggest will work in your codebase.
13. Limitation of liability
To the maximum extent permitted by law, Dutchcode B.V. is not liable for any indirect, incidental, or consequential damages, or for loss of data, revenue, or profits, arising from your use of Blinkof. Our total liability for any claim is limited to the amount you paid us for the service in the three months before the claim. None of these limits apply to damage caused by our own intent or wilful recklessness, or to anything that can't be limited by law.
14. Force majeure
Neither side is liable for a delay or failure caused by something reasonably beyond its control — for example outages or changes at our hosting, AI, or other providers, internet or network failures, cyber-attacks, power cuts, strikes, or government measures. If such a situation lasts a long time, either of us may stop the affected service.
15. You cover unauthorised use
You agree to indemnify and hold Dutchcode B.V. harmless from any claim, loss, or cost arising from your misuse of Blinkof.ai — including scanning or attacking a site or system, or saving or using a login, that you were not authorised to.
16. Suspension & termination
You can stop using Blinkof.ai at any time. We may suspend or end your access if you breach these terms or misuse the service. If you have an account, you can delete it from the dashboard; active paid subscriptions must be cancelled in Stripe first so billing stops cleanly. See our Privacy Policy.
17. Governing law
These terms are governed by the laws of the Netherlands, and disputes are subject to the competent courts there, unless mandatory local consumer law gives you other rights.
18. Changes
We may update these terms as the product evolves; we'll update the date above and, for material changes, do our best to let you know. Continuing to use Blinkof.ai after a change means you accept it.
19. Contact
Questions about these terms: support@dutchcode.com.