# Acceptable Use Policy > What Klyk links must never be used for, how we detect abuse, the measures we take, and how to report or contest. - Web page: - Breadcrumb: [Klyk](https://getklyk.io/en) › [Legal](https://getklyk.io/en/legal) › Acceptable use - Version française: A Klyk address borrows the trust of whoever shares it. This policy sets out what it must never be used for, and what we do when it is. It forms part of the [Terms of Service](https://getklyk.io/en/legal/terms). In effect since November 15, 2026 · Version 2026-11-15 · This is a translation of the French version, which prevails. ## In short - Prohibited: phishing, malware, scams, spam, impersonation and any illegal content. - Destinations are checked automatically against Google Web Risk when they are saved, and regularly afterwards. - Anyone can report a link, **no account needed**: add `+` to its address, or write to us. - You are always told why something was restricted, and can contest it with a person. This summary helps you read the text; it does not replace it. ## 1. What is prohibited You may not use Klyk — links, QR codes, pages, custom domains — to send anyone to, or to distribute: - **phishing**: any page that imitates a service to obtain credentials, payment details or personal information; - **malware or unwanted software**, or deceptive downloads; - **scams and fraud**: fake investments, fake prizes, fake shops, fake technical support…; - **spam**: unsolicited bulk messages containing Klyk links, by email, text message, messaging apps or social networks; - **impersonation** of a person, brand or organisation, including through a misleading short address, page or domain; - **illegal content**, including child sexual abuse material (zero tolerance, reported to the authorities), glorification of or incitement to terrorism, incitement to hatred or violence, harassment, or intimate images shared without consent; - **infringement of others’ rights**: counterfeiting, copyright infringement, disclosure of other people’s personal data; - **cloaking**: using Klyk to hide from other platforms a destination they prohibit, or chaining redirects to evade checks. Nor may you harm the Service itself: circumvent its limits or moderation measures, create links or accounts in automated bulk without our agreement, try to access data that is not yours, probe or overload our systems, or use it to reach internal networks. ## 2. How we detect abuse - **Automated destination checks.** Every destination — including those of targeting rules, A/B variants, pages and domain redirects — is checked against Google Web Risk when it is saved, and again regularly afterwards. A destination already listed as phishing, malware or unwanted software is refused; a destination that becomes listed blocks the existing links that lead to it. - **Traffic spikes.** We also watch the volume of clicks on each link, to spot the abnormal spikes that often come with a fraudulent send. A spike never leads to an automatic block: a person looks at it. - **Blocked sites.** We keep a list of sites Klyk does not redirect to. Adding a site blocks every existing link that leads to it, subdomains included. - **Reports.** When at least three distinct people report the same link, its visitors see a warning before being redirected, until the reports are reviewed. Several reports from the same person count once. - **Human review.** Reports are reviewed by a person, who decides what to do. - **Usage limits.** Link creation is rate-limited, more strictly while the account’s email address is not confirmed. ## 3. Measures we may take Depending on how serious the breach is and whether it is repeated, we may: - show a link’s visitors a warning before redirecting them; - block a link, which then stops redirecting; - remove a button or element from a page; - block a site across the whole Service; - suspend an account: it can no longer sign in, and none of its links or pages is served; - preserve relevant information and pass it to the authorities where the law requires it. A suspension is reversible: nothing is deleted, and lifting it restores the links as they were. Serious or repeated breaches lead to the account being closed. ## 4. Notice and reasons When one of your links is restricted, **the reason is shown on that link in your dashboard**: a destination listed by Google Web Risk, a blocked site, reports under review, or a moderation decision. When the restriction comes from an automated detection, we also email you the link, the destination, the risk category, the date of the check and what you can do. A link blocked because Google Web Risk lists its destination is checked again every day, and **restored automatically** as soon as the destination is no longer listed. If the site in question is yours, once the problem is fixed, ask Google for a review from the [Security issues report in Search Console](https://support.google.com/webmasters/answer/9044101). ## 5. Contesting a decision If you think a measure taken against one of your links or your account is unjustified, write to [abuse@getklyk.io](mailto:abuse@getklyk.io) within six months, stating the link or account concerned and your reasons. Your request is reviewed by a person, and we answer with the reasons for our decision. A measure taken in error is lifted, and the link restored. ## 6. Reporting content Anyone can report a Klyk link, **without an account**: - by adding `+` to the end of its address (for example `getklyk.io/example+`) to open its preview page, then choosing “Report this link”; - from the warning page shown before a link that has already been reported; - by email, to [abuse@getklyk.io](mailto:abuse@getklyk.io). So that we can act, give the link’s exact address, what the problem is and why. By email, also give your name and email address — unless the report concerns child sexual abuse material — and state that the information you provide is accurate and that your report is made in good faith. For an intellectual property infringement, say which right is at stake and on what basis you act. We acknowledge reports sent by email and tell their authors what we did. Reports made from the preview page are anonymous: their author is recorded only in a pseudonymised form, used to count distinct reporters — so we cannot reply to them. > A report made abusively or in bad faith is itself an abuse of the Service. ## 7. Authorities Administrative and judicial authorities can reach us at [legal@getklyk.io](mailto:legal@getklyk.io), in French or English. This is also the point of contact required by the EU Digital Services Act (DSA) for Member State authorities, the European Commission and the European Board for Digital Services. If we become aware of information giving rise to a suspicion that a criminal offence threatening the life or safety of one or more people has taken place, is taking place or is likely to take place, we inform the competent authorities. ## 8. The limits of these protections > **No protection is perfect** > > A legitimate site can be listed by mistake (a false positive), and a dangerous one may not be listed yet (a false negative). A Google Web Risk check reflects Google’s lists at the moment it is made: a page that became dangerous after the last check may not be blocked yet. ## A question about this document? Write to us: a person will answer. [abuse@getklyk.io](mailto:abuse@getklyk.io)