Fair use

The server at publiclocal.app is a free service for developers to share work in progress temporarily: testing, demos and webhooks. It is provided as is, without any guarantee of uptime, and may change or stop at any time.

You may not use it to

• impersonate any company, brand or person, or collect passwords, payment or personal details (phishing);
• distribute malware, run command-and-control servers, or attack other systems;
• host illegal content, or content that infringes copyright;
• send spam, or proxy other people's traffic (VPNs, open proxies, scraping farms);
• run a permanent production website or service. Self-host for that.

Limits

• Random addresses only. Links last 24 hours, or 7 days for users signed in with GitHub, who can extend them by another 7 days at a time.
• HTTP and HTTPS only. No raw TCP.
• Up to 3 tunnels at a time and 10 active links per IP address (50 per signed-in account), 600 requests per minute per tunnel, 2 GB of traffic per session and 10 MB per request.
• Browser visitors see a notice explaining that the link is a temporary tunnel.

Enforcement and privacy

To keep the service safe, we automatically check random live links for signs of phishing or fraud, and review what they flag. Our checker visits a link's home page the way an ordinary browser would.The server logs which IP address (and, if signed in, which GitHub account) opened which link and when. It does not record the content of your traffic. Links that break these rules are removed, and the IP address and GitHub account behind them are banned, without notice. Logs may be shared with hosting providers or authorities when required.

Website analytics

The pages on publiclocal.app itself (this site, not the tunnels) use two visit counters. Rybbit, hosted by us, is cookieless and does not track you across sites. Google Analytics sets cookies only if you choose "Allow" in the banner; without that choice it receives anonymous, cookieless counts. Tunnel pages and the warning page never load analytics. To change your choice, clear this site's data in your browser.

Report abuse

Email abuse@publiclocal.app with the full tunnel address (for example https://k7xq2m.publiclocal.app) and what you saw. We act on reports as quickly as we can.

Found a security problem in PublicLocal itself? Please report it privately on GitHub.