Terms of Service

SiteQuiet is a website-health monitoring service operated by ShabSand (“SiteQuiet”, “we”, “us”). By using the free scanner or subscribing you agree to these terms; if you do not agree, please do not use the service.

When you buy protection, you confirm your agreement by ticking a box on the checkout form before payment. We record that you did, when, and which version of these terms and of the Privacy Policy was in force at the time — the “Last updated” date at the top is that version.

There are two parts to the service:

• The free scanner. A one-off, read-only check of a public website. No account, no payment.
• Protection (paid). Continuous monitoring of the website — or websites — your plan covers, with an alert when a problem is confirmed and an all-clear when it recovers.

What our checks look at: whether the website responds, its SSL certificate, its domain registration, its DNS records, broken links, how quickly it responds, and contact forms (section 7 covers form checks separately). The exact set of checks may grow or change; your dashboard always shows the checks that are actually running for your site.

A subscription also includes, optionally:

• An account. There is no password. You sign in with a one-time link we email you, so the security of your account is the security of your email inbox.
• Our WordPress plugin. You install it yourself. It reports on the installation — never on your visitors — and tells us your website is alive from the inside.
• A public status page. Off unless you switch it on. Switching it off, pausing the website, or letting the subscription lapse takes it down.

You must be at least 18 years old. SiteQuiet is a business tool and is not intended for children. If you use SiteQuiet on behalf of a company, you confirm you are authorised to accept these terms for that company.

You represent and warrant, each time you submit a web address — to the free scanner or to protection — that you own or control that website, or that its owner has authorised you to have it checked and monitored. If your authority ends, remove the website from monitoring or tell us. If we have reason to believe a website was submitted without authority, we may stop checking it and suspend the account, and you are responsible under section 15 for claims that result from an unauthorised submission.

Saying so is not enough for anything beyond reading a website. Before we do anything that puts data into your systems (section 7), you prove you control the website — by publishing a code we give you as a DNS record, a file or a meta tag, or by connecting our WordPress plugin. Any one of them is enough.

The free scanner is strictly read-only. It requests pages the way a visitor’s browser does, and nothing else: it never submits a form, never signs in, never sends data to your website, and never changes anything. Where it finds a contact form it may also check — without submitting anything — whether the address the form sends to answers. Its requests identify themselves as SiteQuietBot.

Scans are rate-limited per connection, per website, and across the service as a whole; recent results are served from a short-lived cache; you may be shown a human-verification step; only public websites reachable over the normal web can be scanned. We may refuse, delay, throttle, cache or block any scan at any time without giving a reason, and we may change or withdraw the free scanner entirely.

A scan is a single snapshot taken from one place at one moment. It is not a security audit, a penetration test, an accessibility audit, or advice. Some checks legitimately come back as “we could not verify this” — an honest unknown, not a finding about your website. The free scanner comes with no guarantee of accuracy, completeness or availability, and — to the fullest extent permitted by law — with no liability attached (section 14).

What we promise

• We verify before we alert. A single failed check never becomes an email. We wait, run the check again, and you only hear from us if the problem is still there; for the check that matters most — whether your website loads at all — we retry and confirm from additional checks before we call it anything.
• Ambiguity is never treated as failure. When a website’s bot protection blocks us, or a lookup does not answer, we report “we could not verify this” — not “broken”.
• We aim to be quiet. One clear email per confirmed problem, one all-clear when it recovers — not a stream of notifications.
• Plain English. Alerts say what happened, whether visitors are affected, and what to do next.

What we do not promise

• We do not guarantee that we will detect every problem with your website, or detect any problem within a particular time. Some faults are invisible from the outside; verification takes time by design; checks run on schedules, not continuously.
• Monitoring results can include false positives and false negatives. We may occasionally report a problem that is not there, or fail to report one that is. We engineer against both; neither can be ruled out.
• We do not guarantee that every scheduled check will run or complete successfully. Our own infrastructure, maintenance and third-party services can prevent or delay checks. A check that could not run produces no finding — not a clean bill of health.
• We do not guarantee delivery of any notification. Alerts travel over third-party email infrastructure; messages can be delayed, filtered to spam, or lost, and an out-of-date alert address gets no useful alerts. Keep your alert address current, allow our sending domain, and check your dashboard — it is the authoritative view.
• A passing check does not mean your website works. A check verifies the specific thing it looked at, at the moment it looked. It does not establish that your website, contact form, checkout, integration or any other functionality is operating correctly end to end.
• The absence of an alert is not a statement that your website is healthy. It means we have not confirmed a problem within what our checks can see.
• We check from the public internet, the way a visitor does. We cannot see inside your server, database, hosting account or email system. If your website, CDN, firewall or bot protection blocks or filters our checks, we may be unable to monitor it, and results will honestly say “we could not verify this” for as long as that lasts.
• SiteQuiet is not a backup service, a security or malware scanner, a firewall, a hosting provider, or a substitute for your own testing, maintenance, backups, or someone who can act when something breaks. You remain responsible for your website and your business systems.
• Do not rely on SiteQuiet where health or safety is at stake. The service is not designed or offered for emergency response, life-safety, medical, or other critical-infrastructure alerting, and must not be used where a missed or late alert could endanger anyone.

No SLA

We aim for high availability of SiteQuiet itself, but we do not commit to any specific uptime for SiteQuiet, and we do not offer service credits or pay compensation for our own downtime or for missed, late or inaccurate checks and alerts (sections 13 and 14).

You are responsible for:

• your website, its content, its hosting, and the systems behind it;
• the accuracy of what you configure: the web addresses you submit, and the alert address we send to;
• installing correctly any SiteQuiet component a feature requires — the WordPress plugin, a verification record, or any future integration. Features that depend on an installed component do not work, or work in a reduced mode, until you install it; your dashboard shows which state each check is in;
• allowing our checks to reach your website (not blocking SiteQuietBot) if you want monitoring results;
• acting on alerts — we tell you what we observed; deciding and doing is yours;
• complying with these terms, including the acceptable-use rules in section 6.

You must not use SiteQuiet to:

• scan, monitor or test a website you do not own, control, or have permission for — the rule we care about most (section 2);
• investigate other people’s systems — no reconnaissance, probing, mapping, or gathering of information about websites, servers or infrastructure you are not authorised for;
• generate load — no load-testing, stress-testing, benchmarking, or using checks to generate traffic against any website (including your own) through our infrastructure, and no using checks to keep an application or server artificially “warm” or awake;
• reach where checks must not go — no attempts to make our systems connect to private, internal or non-web addresses, and no working around our safety controls, rate limits or quotas, including by spreading requests across connections, addresses or accounts;
• defeat protections — no use of the service to bypass or undermine CAPTCHAs, bot protection, authentication, or any security measure, ours or anyone else’s;
• repackage the service — no scraping, automating, reselling or rebranding of the scanner, the service or its results without a written agreement with us. Monitoring your clients’ websites as part of an agency or maintenance engagement is welcome — that is what multi-site plans are for — provided you have each client’s authorisation;
• point checks at pages whose responses contain regulated data — personal health, financial-account or government-identifier data and similar. Our checks store conclusions rather than page copies, but we do not want such content transiting our systems at all;
• break the law, infringe anyone’s rights, or interfere with our service or anyone else’s.

One free account per person or organisation. Enforcement is proportionate: depending on severity we may throttle, restrict, suspend or terminate accounts or targets — with or without notice for serious abuse — and we keep operational records of scan and check requests so abuse can be investigated (see our Privacy Policy). Serious abuse may be reported to affected website owners, hosting providers, or authorities.

If you believe SiteQuiet is being used against a website you are responsible for, email [email protected]. Our checks identify themselves as SiteQuietBot; blocking that user-agent stops our requests to your site, and telling us stops the account.

Inspection (the default)

Our form check reads your public pages and reports whether a contact form is present and what kind it is. The free scanner and unverified sites only ever get inspection. A form that is found is reported as found — not as working. Inspection cannot establish that a form sends, or that messages reach anyone.

Delivery testing (optional, consent required)

Testing whether a form actually delivers means genuinely submitting it. Because that puts data into your systems, it runs only when both are true: you have verified ownership of the website, and you have explicitly switched delivery testing on. You can switch it off at any time, from the dashboard or the WordPress plugin, and switching it off stops testing immediately.

How test submissions behave:

• the message identifies itself in its own words as an automated test sent by SiteQuiet at the website owner’s request, and carries a timestamp and a reference, so you can recognise and filter it;
• only visible, named form fields are filled; hidden fields are never touched; CAPTCHAs are never bypassed or defeated;
• where a form is driven by scripts, testing may operate the page in an automated browser the way a visitor would, under the same rules;
• the result is judged from how the website itself responds to the submission. We do not read your inbox or your form provider’s account, and a delivery verdict is a judgment of the submission’s acceptance — not proof that a message arrived in a mailbox.

Limits, stated plainly

Some forms cannot be delivery-tested — for example forms protected by CAPTCHA, and some script-driven forms. For those, the product reports the form as found and marks delivery testing as unavailable; it will never pretend otherwise. Where testing is unavailable, periodically sending yourself a test message is the reliable check, and we recommend it regardless.

What happens inside your systems is yours

Enabling delivery testing means our test submissions enter whatever your form is connected to — a mailbox, a CRM, an auto-responder, a paid per-submission service. You are responsible for those downstream effects and for configuring your systems accordingly. If any of those matter, do not enable delivery testing.

Slots

A subscription buys protected-website slots, not a specific web address forever. Each slot holds one website at a time and you can change which website occupies it. Current plans, prices and website allowances are shown on our pricing page and at checkout before you pay.

Who takes your payment

Payments, billing, invoices, refund processing and sales taxes are handled by our merchant of record — currently Lemon Squeezy (Sold through Link, LLC, a Stripe company). The payment transaction is between you and the merchant of record under its own buyer terms, alongside these terms, which govern the service itself. Your card or payment details are entered on the merchant of record’s checkout, on their own domain, and never reach SiteQuiet’s servers. Charges appear on your statement with the merchant of record’s descriptor (currently LEMSQZY*). Transactions are processed in US dollars; applicable sales tax or VAT is calculated, collected and remitted by the merchant of record at checkout — SiteQuiet does not collect or remit taxes on your purchase.

Renewal

Subscriptions renew automatically — monthly or annually — until you cancel. The merchant of record emails a reminder before renewal and notifies you of any price increase before it applies.

Cancellation

You can cancel at any time, from your dashboard. Cancellation takes effect at the end of the period you have already paid for: monitoring keeps running until then, and stops when the period ends. Cancelling does not refund the current period (see Refunds below).

Failed payments

If a renewal payment fails, the merchant of record retries it over roughly two weeks and emails you each time. We keep monitoring during that retry period rather than dropping your protection over a card that needs updating. If payment is not recovered, monitoring stops.

Plan changes

You can move between plans — more or fewer website slots, monthly or annual billing — from your dashboard; some payment methods are handled through the merchant of record’s billing portal instead. Changes are applied with proration by the merchant of record’s standard mechanics — typically an adjustment on your next invoice, and moving between monthly and annual billing may involve an immediate charge — and the effect is shown before you confirm. Removing a website from a slot does not by itself change what you pay; changing plans does.

Refunds

If SiteQuiet is not what you expected, we will refund your first payment in full if you ask within 14 days of it being taken. We will always refund a payment we clearly should not have taken. We do not give partial refunds for unused time after a renewal — cancelling stops the next charge rather than refunding the current one. Refunds are processed by the merchant of record, which also independently reserves the right to refund any purchase within 60 days of payment. If you are a consumer in the EU or UK, you may have a statutory 14-day right of withdrawal for the initial purchase; nothing in this section limits any refund or withdrawal right the law gives you.

Disputes

If you believe a charge is wrong, contact us or the merchant of record first — we can fix genuine mistakes faster than a card dispute can.

Price changes

We may change prices. An existing subscription keeps its price until we tell you otherwise: we will email you at least 30 days before a new price applies to your renewal, so you can cancel first if you would rather not continue.

We keep improving SiteQuiet, which means features change, get added, and sometimes get removed — including individual monitoring features and check types, which may also have technical limitations that prevent full verification in some environments. If a change materially reduces what a paid subscription does, we will tell you by email with reasonable notice so you can cancel. Maintenance, outages and interruptions happen; we may pause the free scanner entirely at any time. Anything we label beta or experimental is provided for evaluation and may change or disappear without notice.

As between you and us, you own your website, its content, and the monitoring configuration and results about your website; we claim no rights in them beyond what we need to run the service for you — collecting, processing, storing and displaying them, and sending you alerts and reports. You may use and share your own reports and status pages freely.

SiteQuiet — the software, the checks, the site, the brand — is ours, and nothing in these terms transfers it. SiteQuiet™ and the SiteQuiet logo are trademarks of ShabSand; do not use them without written permission. The WordPress plugin’s code is licensed under its own open-source license (GPL), which governs the code itself; these terms govern the service it connects to.

We may use aggregated, de-identified operational data (for example, check-outcome statistics across many sites) to operate and improve the service; we will not publish such data in a form that identifies you or your website. If you send us feedback or suggestions, we may use them without obligation — this license is non-exclusive, and your ideas stay yours to use elsewhere.

How we handle personal data is described in our Privacy Policy. Customers who need a data processing agreement for GDPR or UK GDPR purposes can request one at [email protected].

By you: cancel at any time, for any reason (section 8). Monitoring continues to the end of the paid period, then stops.

By us: we may suspend or terminate your access if you materially breach these terms — above all, the permission rule and the acceptable-use rules — if payment fails and is not recovered, or if we are required to by law. For serious abuse we may act immediately; otherwise we will give you notice and, where practical, a chance to put things right. If we terminate a paid subscription without you having breached these terms, we will refund the unused part of the period you paid for.

Afterwards: monitoring and alerts stop; status pages come down. For 30 days after a paid subscription ends you can ask us for an export of your monitoring history; after that, data is deleted or retained as set out in our Privacy Policy.

SiteQuiet depends on services we do not control — hosting and network providers, DNS resolvers and domain registries, certificate authorities, email delivery providers, the payment provider, content-delivery networks and browsers — and your website depends on its own set of them. Failures, changes or decisions of third-party services can prevent, delay or distort checks and notifications. We are not responsible for third-party services, and their terms govern your use of them.

EXCEPT AS EXPRESSLY SET OUT IN THESE TERMS, THE SERVICE — INCLUDING THE FREE SCANNER — IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMITTED BY LAW WE DISCLAIM THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT, AND ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, ERROR-FREE, OR WILL DETECT EVERY PROBLEM WITH YOUR WEBSITE OR DELIVER EVERY NOTIFICATION.

Some jurisdictions do not allow some of these exclusions. If yours does not, this section applies to you only as far as the law allows, and your statutory rights — including consumer rights — are not affected.

To the fullest extent permitted by law:

• we are not liable for indirect or consequential loss, lost profits, lost revenue, lost sales, lost leads, lost business or opportunities, lost goodwill, or lost or corrupted data — including where the loss arises from a problem we did not detect, detected late, or reported inaccurately, from a notification that did not arrive, from a false positive you acted on, or from a check that did not run;
• our total aggregate liability to you, for all claims taken together, is limited to the fees you paid us for the service in the 12 months before the event giving rise to the claim. Where you have paid us nothing — for example, the free scanner — our liability is limited to the greatest extent the law allows.

Nothing in these terms excludes or limits liability that cannot legally be excluded or limited — including liability for death or personal injury caused by negligence, or for fraud — and if you are a consumer, your statutory rights are unaffected.

You will cover our reasonable losses, damages and legal costs arising from a third-party claim brought against us because of: (a) a website you submitted without the authority section 2 requires; (b) your breach of the acceptable-use rules in section 6; or (c) your unlawful use of the service. We will notify you promptly of any such claim, let you participate in the defence, and not settle it without consulting you. If you are a consumer, this section applies only to the extent permitted by the law of your country.

These terms are governed by the laws of the State of Israel, and the competent courts of Tel Aviv-Jaffa, Israel have jurisdiction over disputes arising from them — except that if you are a consumer, you keep the protection of mandatory consumer laws of the country where you live and may bring a claim in your local courts where the law gives you that right.

Before going to court, please write to us — most problems are fixable in one email.

We may update these terms as the service changes. The “Last updated” date at the top always reflects the current version. If a change materially affects a paid subscription, we will email you at least 30 days before it takes effect at your next renewal; continuing to use SiteQuiet after it takes effect means you accept it, and cancelling before then means you never do.

If part of these terms is found unenforceable, the rest stands. A failure to enforce a term is not a waiver of it. You may not assign these terms; we may assign them as part of a merger, acquisition or sale of the service, and will tell you if we do. Neither party is liable for delay or failure caused by events beyond its reasonable control — which, for a monitoring service, includes failures of networks and infrastructure we do not operate. These terms and the Privacy Policy are the entire agreement between us about the service.

Questions about these terms, a refund, a cancellation, or anything else — write to us and a person will read it. We aim to reply to every message within two business days.

• Email: [email protected]
• Business: ShabSand — [email protected]

Billing receipts and payment questions can also be raised with Lemon Squeezy, the merchant of record that processed the payment.