GLASSCASTLE SECURITY / SECRET TUNNEL

TERMS OF SERVICE

Secret Tunnel provides capability-scoped access to devices you are authorized to operate. These terms are designed to keep that boundary visible.

Effective: September 5, 2026

1. Authorized use

You may use Secret Tunnel only with devices, accounts, networks, sensors, and environments you own or are explicitly authorized to access. You are responsible for obtaining any consent required for camera, microphone, screen, location, radio, or environmental observations.

2. Prohibited use

Do not use Secret Tunnel for covert surveillance, stalking, keylogging, credential theft, unauthorized access, malware deployment, hidden tracking, or other unlawful or abusive activity. Do not attempt to bypass device-side grants, pairing, owner enables, or other safety controls.

3. Capability boundary

Pairing establishes identity; it does not automatically grant sensor or action capabilities. A device owner controls grants and may revoke them at any time. Personal sensors require additional endpoint enablement. When the hosted relay is used, personal sensors also require a short endpoint-controlled relay lease and the corresponding user OAuth permission; cloud authorization does not create a device capability grant.

4. Experimental status

Secret Tunnel and Sec-TP are evolving security software. Features may change, fail, or be unavailable on particular devices. The service is not a substitute for an independently audited security product where such assurance is required.

5. Your responsibility

You are responsible for device configuration, sensor permissions, local security, lawful use, and decisions made from observations returned by the service. Sensor output can be incomplete, stale, inaccurate, or affected by the endpoint environment.

6. Service changes and suspension

We may change, limit, or suspend functionality to maintain security, comply with law, prevent abuse, or improve the service. A device owner can independently stop a gateway or revoke a paired identity at any time.

7. No warranty

To the extent permitted by applicable law, Secret Tunnel is provided “as is” and “as available,” without warranties of uninterrupted operation, fitness for a particular purpose, or complete security.

8. Limitation

To the extent permitted by applicable law, GlassCastle Security is not responsible for indirect, incidental, special, consequential, or punitive damages arising from use of Secret Tunnel. Rights that cannot lawfully be excluded remain unaffected.

9. Privacy

The Secret Tunnel Privacy Policy describes what data the service processes, why it is used, retention, recipients, and user controls.

10. Contact

Questions about these terms can be sent to glasscastles@proton.me or through the support page.