HookspectorOpen app

Terms of Use - Hookspector

1. Introduction and Acceptance

1.1 Effective Date

These Terms of Use ("Terms") are effective as of November 27, 2025.

1.2 Agreement

These Terms constitute a legally binding agreement between Infinea Consulting Ltd, a company registered in Hungary with registered address at Andor utca 21/c fszt. 1., 1119 Budapest, Hungary, VAT ID: HU14930883 ("Infinea," "we," "us," or "our") and you ("User," "you", or "your") concerning your access to and use of the Hookspector service available at https://www.hookspector.xyz, including all related functionality (collectively, the "Service").

1.3 Acceptance

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you do not agree to these Terms, you must not access or use the Service.

1.4 Authority to Accept

By accepting these Terms, you represent and warrant that:

  • You are at least 18 years of age
  • You have the legal capacity to enter into binding agreements
  • If using the Service in connection with a business, you have the authority to bind that entity to these Terms
  • You will comply with all applicable laws and regulations in your use of the Service

1.5 No Affiliation with Shopify

Hookspector is an independent service provided by Infinea Consulting Ltd. We are not affiliated with, endorsed by, or sponsored by Shopify Inc. or its affiliates. Shopify is a trademark of Shopify Inc.

1.6 Additional Terms

Your use of the Service is also governed by our Privacy Policy, which is incorporated by reference into these Terms.

2. Definitions

For the purposes of these Terms, the following definitions apply:

"Hookspector" means the free, browser-based webhook testing utility that receives and displays webhook payloads in real-time.

"Service" means the Hookspector utility provided by Infinea at https://www.hookspector.xyz.

"Website" means the Hookspector website located at https://try.hookspector.xyz.

"Endpoint" means the unique webhook URL automatically generated for your browser session that receives and displays incoming webhook requests.

"Event" means a webhook request received at your Endpoint, including its headers and payload data.

"HMAC Verification" means the cryptographic signature verification feature that validates webhook authenticity using Shopify's HMAC-SHA256 signing method.

"Payload" means the JSON data body sent with a webhook request.

"User" or "you" means any individual accessing or using the Service.

3. Service Description

3.1 Core Functionality

Hookspector provides a free webhook testing utility with the following features:

Endpoint Generation

  • Automatic generation of unique webhook URLs upon visiting the Service
  • Endpoints are associated with your browser session via local storage and cookies
  • Up to 3 endpoints may be active per browser session

Real-Time Event Display

  • Incoming webhook requests appear instantly in your browser
  • Events are displayed in chronological order
  • Older events are automatically removed when display limits are reached

Event Inspection

  • View complete HTTP headers for each received webhook
  • View formatted JSON payloads
  • Copy headers and payloads to clipboard with one click
  • Open individual events for detailed examination

HMAC Signature Verification

  • Optional verification of Shopify webhook signatures
  • Visual indication of signature validity (verified/unverified)
  • Requires input of your Shopify webhook signing secret

3.2 Service Characteristics

Browser-Based Operation

  • The Service operates entirely in your browser
  • Endpoints remain active only while your browser tab is open
  • Closing your browser terminates your endpoint and removes all event data
  • Clearing cookies or browser data will result in generation of a new endpoint

No Persistent Storage

  • Webhook payloads are never stored in databases or log files
  • Data exists only in server memory during active transmission to your browser
  • All event data is permanently deleted when you close your browser
  • We retain no history of webhook content or payloads

Anonymous Usage

  • No account registration or login required
  • No personally identifiable information (PII) collected from webhook payloads
  • Usage analytics are collected anonymously (see Privacy Policy for details)

3.3 Technical Limitations

The Service operates with the following technical constraints:

  • Maximum of 3 endpoints per browser session
  • Maximum of 3,000 webhook requests per IP address per day (Fair Use Policy)
  • Connection limits per IP address to ensure service availability
  • Automatic removal of oldest events when display capacity is reached
  • HMAC verification supports only Shopify webhook signatures

3.4 Intended Use

Hookspector is designed for:

  • Testing and debugging Shopify webhook integrations during development
  • Inspecting webhook headers and payload structures
  • Verifying webhook signature authenticity
  • Quick prototyping and integration validation
  • Educational purposes related to webhook technology

3.5 Service Availability

The Service is provided on a best-effort basis. We do not guarantee:

  • Continuous availability or uptime
  • Specific performance metrics
  • Data delivery or accuracy
  • Service persistence or longevity

We may modify, suspend, or discontinue the Service at any time without notice.

4. Acceptable Use Policy

4.1 Permitted Uses

You may use the Service for:

  • Testing webhook integrations during development
  • Debugging webhook delivery issues
  • Inspecting webhook payload formats
  • Verifying webhook signatures
  • Learning about webhook technology
  • Non-production testing of any webhook-compatible service
  • Educational and training purposes

4.2 Prohibited Uses

You agree not to use the Service for:

Production Environments

  • Running production workloads or business-critical processes
  • Relying on the Service for operational systems
  • Any use where Service unavailability would cause business impact

Sensitive Data

  • Processing, transmitting, or storing personally identifiable information (PII)
  • Handling payment card data or financial information
  • Processing health records or other regulated data
  • Transmitting credentials, API keys, or authentication tokens
  • Any data subject to regulatory compliance requirements (GDPR, HIPAA, PCI-DSS, etc.)

Illegal or Harmful Activities

  • Any activity that violates applicable laws or regulations
  • Processing or facilitating illegal content or transactions
  • Violating intellectual property rights
  • Harassment, abuse, or threats against any person or entity
  • Distributing malware, viruses, or malicious code

System Abuse

  • Distributed denial-of-service (DDoS) attacks or similar overload attempts
  • Attempting to crash, overwhelm, or disrupt the Service
  • Circumventing technical limitations or usage quotas
  • Reverse engineering, decompiling, or attempting to extract source code
  • Probing, scanning, or testing vulnerabilities without authorization
  • Attempting to access other users' endpoints or data

Commercial Misuse

  • Reselling or sublicensing access to the Service
  • Using the Service as infrastructure for commercial products
  • Creating competing webhook testing services using our infrastructure
  • Excessive automated usage beyond fair use limits

4.3 Fair Use Policy

To ensure Service availability for all users, we enforce a Fair Use Policy:

  • Maximum 3,000 webhook requests per IP address per day
  • Maximum 3 active endpoints per browser session
  • Connection rate limits per IP address

Exceeding these limits may result in temporary or permanent service restrictions.

4.4 Compliance with Third-Party Terms

If you use the Service to test webhooks from third-party platforms (including Shopify):

  • You are solely responsible for complying with those platforms' terms of service
  • You must have proper authorization to receive and test webhooks from those platforms
  • You must comply with any data protection or privacy requirements
  • We assume no responsibility for your compliance with third-party terms

4.5 Monitoring and Enforcement

We reserve the right to:

  • Monitor usage patterns to detect violations and abuse
  • Investigate suspected violations of these Terms
  • Terminate or suspend access for any IP address or endpoint violating these Terms
  • Block traffic from specific IP addresses or geographic regions
  • Report illegal activities to appropriate authorities
  • Take legal action for violations that cause harm to the Service or other users

4.6 Reporting Violations

If you become aware of any violation of this Acceptable Use Policy, please report it to [email protected].

5. Intellectual Property

5.1 Infinea's Intellectual Property

The Service, including all software, algorithms, designs, user interfaces, and documentation, is the exclusive property of Infinea and is protected by intellectual property laws. You acknowledge that we own all rights in:

  • The Hookspector platform and webhook receiving technology
  • Our user interface design and functionality
  • Our HMAC verification implementation
  • Our real-time data transmission infrastructure
  • Any improvements or derivatives of our technology
  • Our trademarks, logos, and brand elements

5.2 Restrictions on Use

You may not:

  • Copy, modify, or create derivative works of the Service
  • Decompile, reverse engineer, or attempt to extract source code
  • Remove or alter any proprietary notices or labels
  • Use our trademarks without express written permission
  • Claim any ownership rights in the Service or its infrastructure
  • Frame or mirror any part of the Service without authorization

5.3 Your Data

You retain all rights to any data you transmit to your Endpoints. By using the Service, you grant us a limited, non-exclusive license to:

  • Receive and temporarily process webhook data in server memory
  • Transmit that data to your browser in real-time
  • Collect anonymized usage analytics as described in our Privacy Policy

This license automatically terminates when you close your browser or when the data is transmitted to you.

5.4 Feedback

If you provide feedback, suggestions, or recommendations regarding the Service ("Feedback"), you grant us an unrestricted, perpetual, irrevocable, royalty-free license to use such Feedback for any purpose without compensation to you.

6. Data Processing and Privacy

6.1 Privacy Policy

Our collection, use, and processing of data is governed by our Privacy Policy, which is incorporated by reference into these Terms. By using the Service, you acknowledge that you have read and understood our Privacy Policy.

6.2 No Persistent Storage

We do not store webhook payloads in any persistent storage:

  • Payloads exist only in server memory during transmission
  • No payloads are written to databases or log files
  • All payload data is deleted when your browser connection closes
  • We retain no history of webhook content

6.3 Analytics Data

We collect anonymous usage analytics through PostHog, including:

  • App opened events
  • Endpoint copied events
  • HMAC verification toggled on/off
  • Event HTTP headers copied
  • Event payload copied
  • Event received
  • Event opened
  • Cloudhooks link opened

No personally identifiable information (PII) is collected through analytics.

6.4 Infrastructure Logging

Our hosting provider (Render) logs only infrastructure-related events. No webhook payloads or PII are included in infrastructure logs.

6.5 International Data Transfers

The Service is hosted on servers located in the United States. By using the Service, you acknowledge and consent to the transfer of data to the United States. We implement appropriate safeguards for international data transfers as described in our Privacy Policy.

6.6 Your Responsibilities

You are responsible for:

  • Ensuring you have the right to transmit any data to the Service
  • Not transmitting sensitive personal data, PII, or regulated data
  • Complying with applicable data protection laws (including GDPR)
  • Obtaining necessary consents for any data you process through the Service
  • Understanding that webhook data is transmitted in real-time without encryption beyond standard HTTPS

6.7 GDPR Compliance

For users in the European Economic Area:

  • We act as a data processor for webhook payloads you transmit
  • You act as the data controller for any personal data in your webhooks
  • We process data only as necessary to provide the Service
  • Data is deleted immediately after transmission to your browser
  • You may exercise your privacy rights as described in our Privacy Policy

7. Disclaimers and Limitations of Liability

7.1 "As Is" Service Provision

THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

7.2 No Warranty on Accuracy or Reliability

We specifically do not warrant that:

  • The Service will operate without errors or interruptions
  • The Service will meet your specific requirements
  • Webhook data will be delivered accurately or completely
  • The Service will be available at any particular time
  • Any errors in the Service will be corrected
  • The Service will be secure or free from vulnerabilities
  • HMAC verification results will be accurate

7.3 Free Service Disclaimer

As a free service, Hookspector is provided without any commitment to:

  • Service availability or uptime
  • Data integrity or delivery
  • Feature persistence or functionality
  • Technical support or assistance
  • Bug fixes or updates
  • Continued operation or existence

We may modify, suspend, or permanently discontinue the Service at any time without notice.

7.4 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

Complete Disclaimer: Our total liability to you for all claims arising out of or relating to these Terms or the Service, regardless of the form of action, is ZERO. As a free service, you have paid us nothing, and we owe you nothing.

Excluded Damages: In no event will we be liable for any damages whatsoever, including but not limited to:

  • Loss of data or webhook payloads
  • Loss of business or revenue
  • Service interruptions or unavailability
  • Inaccurate data transmission
  • Failed webhook deliveries
  • Security breaches or data exposure
  • Costs of substitute services
  • Any indirect, incidental, special, consequential, or punitive damages

This limitation applies regardless of whether we have been advised of the possibility of such damages.

7.5 Exceptions to Limitations

Nothing in these Terms excludes or limits our liability for:

  • Death or personal injury caused by our gross negligence
  • Fraud or fraudulent misrepresentation
  • Any liability that cannot be excluded or limited under applicable law

7.6 Your Acknowledgments

You acknowledge and agree that:

  • You use the Service entirely at your own risk
  • You assume full responsibility for any consequences of using the Service
  • You will not transmit sensitive, confidential, or business-critical data
  • You understand the Service may fail, lose data, or become unavailable at any time
  • You have no recourse for any losses resulting from Service use
  • The limitations reflect the free nature of the Service

7.7 Third-Party Services

We are not responsible for:

  • Shopify's webhook delivery or API functionality
  • Your Shopify store's operation or compliance
  • Third-party services that send webhooks to your Endpoints
  • Internet connectivity or infrastructure issues
  • Your browser's functionality or data storage

7.8 Security Disclaimer

While we implement reasonable security measures:

  • We do not guarantee the security of data in transit
  • Webhook data may be vulnerable to interception
  • You should never transmit sensitive or confidential information
  • We disclaim all liability for security breaches or data exposure
  • You are responsible for the security of your own systems

8. Termination

8.1 Automatic Termination

Your access to the Service automatically terminates when:

  • You close your browser tab
  • You clear your browser cookies or local storage
  • Your browser session ends
  • Your Endpoint reaches its activity limit

No action is required on your part or ours for this automatic termination.

8.2 Termination by Infinea

We may immediately terminate or suspend your access to the Service without notice if:

  • You breach any provision of these Terms
  • You exceed Fair Use Policy limits
  • We detect abusive, fraudulent, or illegal activity
  • We suspect DDoS attacks or system abuse
  • Required by law or court order
  • We elect to discontinue the Service entirely

We may implement termination through:

  • IP address blocking
  • Endpoint suspension
  • Geographic region blocking
  • Service-wide shutdown

8.3 Effect of Termination

When your access terminates (whether automatically or by our action):

  • All active Endpoints are immediately deactivated
  • All event data in memory is permanently deleted
  • You lose access to any displayed webhook information
  • No data can be recovered or exported
  • No refunds or compensation are owed (as the Service is free)

8.4 Survival of Terms

The following sections survive any termination:

  • Section 5 (Intellectual Property)
  • Section 6 (Data Processing and Privacy)
  • Section 7 (Disclaimers and Limitations of Liability)
  • Section 9 (Indemnification)
  • Section 10 (Governing Law and Disputes)
  • Section 11 (General Provisions)

8.5 Reinstatement

After termination by us:

  • You may not access the Service if your IP address is blocked
  • Opening a new browser session will generate a new Endpoint if your IP is not blocked
  • We reserve the right to refuse service to anyone at our discretion
  • Repeated violations may result in permanent IP blocks

9. Indemnification

9.1 Your Indemnification Obligations

You agree to defend, indemnify, and hold harmless Infinea Consulting Ltd, its affiliates, and their respective officers, directors, employees, agents, and service providers (collectively, "Infinea Parties") from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to:

  • Your violation of these Terms
  • Your use or misuse of the Service
  • Any data you transmit to the Service
  • Your violation of applicable laws or regulations
  • Any claim that your use of the Service infringes third-party rights
  • Your breach of any representations or warranties made in these Terms
  • Your failure to comply with Shopify's or other third-party terms
  • Any harm caused by webhooks or data you send through the Service

9.2 Indemnification Process

If we seek indemnification from you:

  • We will promptly notify you of any claim
  • You will have the right to assume control of the defense with counsel of your choice
  • We will reasonably cooperate with your defense at your expense
  • You may not settle any claim that imposes liability on us without our prior written consent
  • We may participate in the defense with our own counsel at our expense

9.3 Survival

This indemnification provision survives any termination or expiration of these Terms.

10. Governing Law and Disputes

10.1 Governing Law

These Terms and any dispute arising out of or related to them or the Service shall be governed by and construed in accordance with the laws of Hungary, without regard to its conflict of law provisions.

10.2 Jurisdiction

You agree that any judicial proceeding to resolve disputes relating to these Terms or the Service will be brought in the competent courts of Budapest, Hungary, and you hereby consent to the exclusive jurisdiction and venue of such courts.

10.3 Informal Dispute Resolution

Before initiating formal legal proceedings, the party raising a dispute should provide written notice to the other party describing the nature and basis of the claim. The parties should then attempt to resolve the dispute through good faith negotiations for at least 30 days.

10.4 Waiver of Jury Trial

TO THE EXTENT PERMITTED BY LAW, EACH PARTY HEREBY WAIVES ANY RIGHT TO JURY TRIAL IN CONNECTION WITH ANY ACTION OR LITIGATION ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE.

10.5 Class Action Waiver

You agree that any dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated, or representative action.

10.6 Limitation Period

Any cause of action or claim you may have arising out of or relating to these Terms or the Service must be commenced within one (1) year after the cause of action accrues; otherwise, such cause of action or claim is permanently barred.

11. General Provisions

11.1 Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and Infinea regarding the Service and supersede all prior agreements, representations, and understandings concerning the subject matter.

11.2 Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable. If such modification is not possible, the provision shall be severed from these Terms. The validity, legality, and enforceability of the remaining provisions shall not be affected.

11.3 No Waiver

Our failure to enforce any right or provision of these Terms shall not be deemed a waiver of such right or provision. Any waiver must be in writing and signed by an authorized representative of Infinea.

11.4 Assignment

You may not assign or transfer these Terms or any rights or obligations hereunder. We may freely assign these Terms without restriction. Subject to the foregoing, these Terms will bind and inure to the benefit of the parties and their respective successors and permitted assigns.

11.5 Notices

Given the anonymous nature of the Service:

  • We have no means to contact you directly
  • You acknowledge that you will not receive individual notice of Terms changes
  • You are responsible for periodically reviewing these Terms
  • Continued use of the Service constitutes acceptance of any changes

To contact us, send email to [email protected] or write to:

Infinea Consulting Ltd
Andor utca 21/c fszt. 1.
1119 Budapest
Hungary

11.6 Relationship of Parties

Nothing in these Terms creates or implies any partnership, joint venture, agency, or employment relationship between you and Infinea. You have no authority to make or accept any offers or representations on our behalf.

11.7 Force Majeure

Neither party shall be liable for any failure or delay in performance under these Terms arising from circumstances beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, riots, pandemic, or Internet service disruptions.

11.8 Interpretation

The headings used in these Terms are for convenience only and shall not affect the interpretation of these Terms. The words "include," "includes," and "including" shall be deemed to be followed by "without limitation."

11.9 Electronic Communications

By using the Service, you consent to receiving electronic communications from us (if we can contact you). You agree that all agreements, notices, disclosures, and other communications we provide electronically satisfy any legal requirement that such communications be in writing.

11.10 No Support Obligation

As a free service, we have no obligation to provide technical support, customer service, bug fixes, updates, or any other assistance. Any support we choose to provide is at our sole discretion.

11.11 Relationship to Cloudhooks

Hookspector is provided by Infinea as a free utility. We also offer Cloudhooks, a paid Shopify automation app. These are separate services with separate terms:

  • Using Hookspector does not create any obligation regarding Cloudhooks
  • Cloudhooks is governed by its own Terms of Service
  • No data or rights transfer between the two services
  • We may reference Cloudhooks within the Hookspector interface

12. Changes to Terms

12.1 Right to Modify

We reserve the right to modify, update, or replace these Terms at any time at our sole discretion without notice.

12.2 No Notice Obligation

Because the Service is anonymous and free:

  • We have no means to notify you of changes individually
  • We will not provide advance notice of Terms modifications
  • The updated Terms will be posted at https://try.hookspector.xyz/terms
  • The "Effective Date" will be updated to reflect the revision date

12.3 Your Responsibility

You are responsible for:

  • Periodically reviewing these Terms for changes
  • Understanding that your continued use constitutes acceptance
  • Ceasing use if you disagree with any changes

12.4 Material Changes

Even for material changes that significantly affect your rights:

  • We are not obligated to provide notice
  • Changes take effect immediately upon posting
  • Your continued use after changes constitutes acceptance
  • This reflects the free, anonymous nature of the Service

13. Contact Information

13.1 Company Information

Infinea Consulting Ltd
Andor utca 21/c fszt. 1.
1119 Budapest
Hungary

VAT ID: HU14930883

13.2 General Inquiries and Feature Requests

For questions about the Service or feature requests:

Email: [email protected]

Note: As a free, self-service utility, we do not provide technical support or guaranteed response times. Feature requests are welcome but implementation is at our sole discretion.

13.3 Legal Notices

For legal notices or formal communications:

Email: [email protected]
Subject Line: Legal Notice - Hookspector

Postal Address:

Infinea Consulting Ltd
Attn: Legal Department
Andor utca 21/c fszt. 1.
1119 Budapest
Hungary

13.4 Privacy Inquiries

For privacy-related requests or GDPR inquiries:

Email: [email protected]
Subject Line: Privacy Request - Hookspector

13.5 Abuse Reports

To report violations of these Terms or abusive behavior:

Email: [email protected]s
Subject Line: Abuse Report - Hookspector

13.6 Website

Hookspector: https://www.hookspector.xyz
Cloudhooks: https://cloudhooks.dev

Last Updated: November 27, 2025

By using Hookspector, you acknowledge that you have read, understood, and agree to be bound by these Terms of Use.