01Your account and keys

• You need a CubDomain account to use the API. One free account per person or business.
• Keep your API keys secret and on your server, never in a web page or an app people can download. You’re responsible for every call made with your keys.
• If a key leaks, revoke it in your dashboard straight away. We may revoke a key we believe has been exposed, and we’ll tell you if we do.
• Test keys (cd_test_…) return sample data and use no credits. Use them to build and test; don’t use them to work around your plan’s limits.

02Fair use and rate limits

• Stay within your plan’s rate limit. Requests over the limit get a 429 response with a Retry-After header saying when to try again.
• Don’t try to get around your limits or credits, for example by opening several free accounts or sharing keys between businesses.
• Don’t use the API to attack, overload or scan systems you don’t own or don’t have permission to test, or to break any law.

03What you can do with the data

• You can use results inside your own apps and services, and show them to your users.
• You can’t resell or give away raw data in bulk, or use it to build a competing database or API.
• Don’t use WHOIS or other personal data for spam, marketing, stalking or anything unlawful. Follow the privacy laws that apply where you and your users are.
• Some data comes from third parties with their own terms (see “Where the data comes from”). We may limit or remove fields to follow them.