Effective date: 18 October 2026. This page describes acceptable use of Scrap Nearby’s website, booking form and connected integrations. It does not grant public API access.
1. No public API licence by default
Unless Scrap Nearby provides express written authorisation, no person receives a licence to access, test, scrape, automate or integrate with private endpoints, booking backends, databases, Google Sheets, Apps Script endpoints, credentials or administrative systems.
2. Prohibited conduct
- Unauthorised access, account takeover, password guessing or bypassing authentication.
- Security scanning, penetration testing or vulnerability exploitation without prior written permission.
- Automated fake bookings, spam, denial-of-service activity or excessive requests.
- Extracting, changing, deleting or disclosing booking records or personal data without authority.
- Publishing, selling or using API keys, access tokens, passwords, session cookies or private URLs to gain access.
- Impersonation, phishing, malware, tampering with forms, or interfering with availability or data integrity.
3. API credentials and integrations
Any authorised integrator must keep credentials confidential, use least-privilege permissions, store secrets server-side, rotate compromised credentials, validate input, limit request rates, log security-relevant events and notify us promptly of suspected compromise. Do not embed secrets in browser JavaScript, public repositories or customer-visible pages. Access may be suspended if a credential is exposed or misuse is suspected.
4. Booking endpoint and data protection
A publicly reachable submission URL must not be assumed private merely because its address is difficult to guess. Technical controls should include server-side validation, spam protection, rate limiting, minimal permissions, restricted spreadsheet sharing, monitoring and a tested recovery process. The website may reject malformed or suspicious requests. No visitor is authorised to read the booking sheet unless separately granted access by its owner.
5. Vulnerability reporting
If you believe you have found a security weakness, do not access other users’ records, change data, disrupt service, or publish exploit details. Send a concise report to support@scrapnearby.com with the affected page, approximate time and safe reproduction details. Do not include passwords, API tokens or other secrets. We will review reports as reasonably practicable; this page is not a promise of a formal bug-bounty programme or immunity from law.
6. Monitoring and response
We may use security logs, rate limits, access restrictions, backups and service-provider tools to detect misuse and maintain the website. Where appropriate and lawful, we may block traffic, revoke credentials, preserve relevant evidence, contact providers or report suspected unlawful activity to competent authorities.
7. Third-party services
Google, WhatsApp, hosting, maps, social media and other providers operate under their own terms. Their uptime, security controls and processing are not fully controlled by Scrap Nearby. Integrations must comply with provider terms and applicable laws.
8. No guarantee of perfect security
We take reasonable steps to protect systems but cannot promise that any website or internet service is immune from every attack, outage or data loss. This does not limit obligations that cannot be excluded by law. Security also depends on proper configuration, updates, restricted account access and incident response.
9. Enforcement and contact
Unauthorised activity may result in blocked access and lawful civil, contractual or criminal remedies where applicable. Contact support@scrapnearby.com for security reports. This page does not replace a separate written API agreement if access is later offered to developers or business partners.
Explore Scrap Nearby services or contact our team for more information.