Acceptable Use Policy

Login-walled sites where access requires user credentials we do not own (Google account walls, Facebook login flows, etc.).

Banks and any financial-institution login portal.

Dating apps.

Social media login pages and credential gates.

Any site whose Terms of Service we are aware prohibit automated access and where the operator has not granted us permission.

Credential stuffing, password brute-forcing, or any attempt to enumerate user accounts.

Anything resembling a Denial of Service or distributed Denial of Service — including aggressive single-domain volumes that we judge to be punitive rather than analytical.

Scraping personally identifiable information (PII) about private individuals where they are the subject of the page, rather than an operator of a regulated business.

Circumventing paywalls.

We maintain a gateway-level blocklist of disallowed domains, updated as we encounter abuse patterns. Requests targeting blocklisted domains return 451 and do not count toward billing. We will not publish the full list; appeals to add or remove a domain go to support@ghostfetch.io.

Single-target volumes above 10,000/hour without prior coordination are throttled and may be suspended. If you have a high-volume single-target use case, talk to us before launching — we can scale a worker pool with you.

These are the use cases we are built for. Contractor licenses, business entity records, workers-comp filings, property records, court dockets — go for it.

We err on the side of suspending first and asking questions second. If your account is suspended in error, email support@ghostfetch.io with the affected key prefix and we will investigate.