Acceptable Use Policy

You may not use Klyk — links, QR codes, pages, custom domains — to send anyone to, or to distribute:

• phishing: any page that imitates a service to obtain credentials, payment details or personal information;
• malware or unwanted software, or deceptive downloads;
• scams and fraud: fake investments, fake prizes, fake shops, fake technical support…;
• spam: unsolicited bulk messages containing Klyk links, by email, text message, messaging apps or social networks;
• impersonation of a person, brand or organisation, including through a misleading short address, page or domain;
• illegal content, including child sexual abuse material (zero tolerance, reported to the authorities), glorification of or incitement to terrorism, incitement to hatred or violence, harassment, or intimate images shared without consent;
• infringement of others’ rights: counterfeiting, copyright infringement, disclosure of other people’s personal data;
• cloaking: using Klyk to hide from other platforms a destination they prohibit, or chaining redirects to evade checks.

Nor may you harm the Service itself: circumvent its limits or moderation measures, create links or accounts in automated bulk without our agreement, try to access data that is not yours, probe or overload our systems, or use it to reach internal networks.

• Automated destination checks. Every destination — including those of targeting rules, A/B variants, pages and domain redirects — is checked against Google Web Risk when it is saved, and again regularly afterwards. A destination already listed as phishing, malware or unwanted software is refused; a destination that becomes listed blocks the existing links that lead to it.
• Traffic spikes. We also watch the volume of clicks on each link, to spot the abnormal spikes that often come with a fraudulent send. A spike never leads to an automatic block: a person looks at it.
• Blocked sites. We keep a list of sites Klyk does not redirect to. Adding a site blocks every existing link that leads to it, subdomains included.
• Reports. When at least three distinct people report the same link, its visitors see a warning before being redirected, until the reports are reviewed. Several reports from the same person count once.
• Human review. Reports are reviewed by a person, who decides what to do.
• Usage limits. Link creation is rate-limited, more strictly while the account’s email address is not confirmed.

Depending on how serious the breach is and whether it is repeated, we may:

• show a link’s visitors a warning before redirecting them;
• block a link, which then stops redirecting;
• remove a button or element from a page;
• block a site across the whole Service;
• suspend an account: it can no longer sign in, and none of its links or pages is served;
• preserve relevant information and pass it to the authorities where the law requires it.

A suspension is reversible: nothing is deleted, and lifting it restores the links as they were. Serious or repeated breaches lead to the account being closed.

When one of your links is restricted, the reason is shown on that link in your dashboard: a destination listed by Google Web Risk, a blocked site, reports under review, or a moderation decision. When the restriction comes from an automated detection, we also email you the link, the destination, the risk category, the date of the check and what you can do.

A link blocked because Google Web Risk lists its destination is checked again every day, and restored automatically as soon as the destination is no longer listed. If the site in question is yours, once the problem is fixed, ask Google for a review from the Security issues report in Search Console.

If you think a measure taken against one of your links or your account is unjustified, write to abuse@getklyk.io within six months, stating the link or account concerned and your reasons. Your request is reviewed by a person, and we answer with the reasons for our decision.

A measure taken in error is lifted, and the link restored.

Anyone can report a Klyk link, without an account:

• by adding + to the end of its address (for example getklyk.io/example+) to open its preview page, then choosing “Report this link”;
• from the warning page shown before a link that has already been reported;
• by email, to abuse@getklyk.io.

So that we can act, give the link’s exact address, what the problem is and why. By email, also give your name and email address — unless the report concerns child sexual abuse material — and state that the information you provide is accurate and that your report is made in good faith. For an intellectual property infringement, say which right is at stake and on what basis you act.

We acknowledge reports sent by email and tell their authors what we did. Reports made from the preview page are anonymous: their author is recorded only in a pseudonymised form, used to count distinct reporters — so we cannot reply to them.

Administrative and judicial authorities can reach us at legal@getklyk.io, in French or English. This is also the point of contact required by the EU Digital Services Act (DSA) for Member State authorities, the European Commission and the European Board for Digital Services.

If we become aware of information giving rise to a suspicion that a criminal offence threatening the life or safety of one or more people has taken place, is taking place or is likely to take place, we inform the competent authorities.