Terms of Service

Effective date: March 18, 2026

These Terms of Service ("Terms") govern your access to and use of BugUnstuck (the "Platform"), operated by its owners and contributors ("we," "us," or "our"). By creating an account or using the Platform, you agree to be bound by these Terms in their entirety.

1. Acceptance of Terms

By accessing, registering on, or using BugUnstuck you confirm that you are at least 18 years old, have the legal capacity to enter binding agreements, and accept these Terms, our Privacy Policy, and our Acceptable Use Policy. If you do not agree, you must not use the Platform.

2. Nature of the Platform

BugUnstuck is a collaboration coordination tool for independent security researchers. We provide a venue for users to post masked, anonymized descriptions of bug bounty findings they need help with. We are not a party to any bounty program, vulnerability disclosure agreement, or collaboration arrangement between users. We do not review, verify, endorse, or take responsibility for the content, accuracy, legality, or outcome of any request or collaboration.

3. User Responsibilities

You are solely and entirely responsible for:

• Legality: Ensuring that all your activities — including security research, testing, collaboration, and disclosure — comply with all applicable local, national, and international laws, regulations, and the specific rules of any bug bounty or vulnerability disclosure program.
• Authorization: Possessing valid written or program-defined authorization before conducting any security testing on any system, network, or application.
• Content accuracy: Ensuring that all information you post is truthful, properly masked, and does not contain prohibited content (see Acceptable Use Policy).
• Program compliance: Complying with the terms, scope, and rules of every bug bounty or VDP program you participate in. Many programs prohibit sharing findings with third parties — it is your responsibility to verify this before posting.
• Collaboration terms: Negotiating, documenting, and honoring any collaboration agreements, bounty splits, or arrangements with other users independently of BugUnstuck.

4. Prohibited Conduct

You agree not to use the Platform to:

• Post real target names, identifying URLs, IP addresses, domain names, credentials, API keys, tokens, or any personally identifiable information (PII).
• Facilitate, coordinate, or conduct unauthorized access to computer systems.
• Violate any bug bounty program's terms of service or confidentiality requirements.
• Engage in fraud, extortion, blackmail, or any form of coercion against targets or other researchers.
• Sell, trade, or broker access to vulnerabilities outside of legitimate bounty programs.
• Upload malware, exploits, or any code intended to damage systems.
• Harass, threaten, or abuse other users.
• Create multiple accounts to evade bans, rate limits, or other enforcement actions.
• Use automated tools to scrape, crawl, or extract data from the Platform at scale.

5. Disclaimer of Liability

THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

To the fullest extent permitted by applicable law:

• We are not liable for any direct, indirect, incidental, special, consequential, or punitive damages arising from your use of the Platform, including but not limited to: loss of bounty payouts, account bans on third-party platforms, legal action taken against you, data breaches, or reputational harm.
• We are not responsible for the actions, content, or conduct of any user, including any illegal, unauthorized, or harmful activity.
• We do not guarantee that any collaboration will lead to successful bug validation, bounty payouts, or any other specific outcome.
• We do not mediate disputes between users. Any disagreement over bounty splits, attribution, or collaboration terms is exclusively between the parties involved.

6. Indemnification

You agree to indemnify, defend, and hold harmless BugUnstuck, its owners, operators, contributors, and affiliates from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or in connection with: (a) your use of the Platform; (b) your violation of these Terms; (c) your violation of any third party's rights, including any bug bounty program's terms; or (d) any content you post or actions you take through the Platform.

7. Content Ownership and License

You retain ownership of all content you post. By posting content on BugUnstuck, you grant us a worldwide, non-exclusive, royalty-free license to display, distribute, and store that content for the purpose of operating the Platform. We may remove any content at our sole discretion, without notice or liability.

8. Account Termination

We reserve the right to suspend or terminate your account at any time, for any reason, without prior notice. You may delete your account at any time. Termination does not relieve you of obligations incurred prior to termination, including indemnification.

9. No Professional Advice

Nothing on this Platform constitutes legal, financial, or professional security advice. You should consult qualified professionals before making decisions about vulnerability disclosure, legal compliance, or financial arrangements.

10. Modifications

We may modify these Terms at any time. Continued use of the Platform after changes constitutes acceptance of the updated Terms. Material changes will be indicated by updating the "Effective date" at the top.

11. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the applicable jurisdiction, without regard to conflict of law principles. Any disputes shall be resolved through binding arbitration or in the competent courts of that jurisdiction.

12. Severability

If any provision of these Terms is found unenforceable, the remaining provisions remain in full force and effect.

13. Entire Agreement

These Terms, together with the Privacy Policy and Acceptable Use Policy, constitute the entire agreement between you and BugUnstuck regarding your use of the Platform.