1. Accepting these terms
By using uwitz.org you agree to these terms. If you do not agree, stop using the site. These terms are between you and Uwitz, established in Estonia ("Uwitz", "we", "us").
We may update these terms. Material changes get a new "last updated" date and a note on the site. Continuing to use the site after that means you accept the new version.
2. Using the site
You may read, quote, and link to anything we publish here. You may not:
- Break into, overload, or degrade the site or the infrastructure behind it, except as expressly allowed in section 4.
- Use the site to break the law, or to harm, harass, or surveil other people.
- Impersonate Uwitz, or present modified copies of our work as ours.
- Scrape the site in a way that degrades it for other people. Reasonable, well-behaved automated access is fine.
The staff console and sign-in are for authorised staff. Using credentials that are not yours is unauthorised access, and we will treat it as such.
3. Our software
Our tools are open source. Each repository carries its own licence file, and that licence — not this page — governs what you may do with the code. Where the two conflict, the repository licence wins.
You are free to run, read, modify, and redistribute our software on the terms of its licence. You are not free to imply that we endorse, support, or have audited your fork.
The Uwitz name, the shield mark, and our logos are ours and are not covered by those licences. You may use them to refer to us factually. You may not use them as your own branding or in a way that suggests we back your product.
4. Security research
Testing our own systems in good faith is welcome, within limits. If you stay inside them, we will not pursue legal action against you.
- Test only systems we operate. Not our clients', not our divisions', not third parties'.
- No denial of service, no spam, no social engineering of our people, no physical attacks.
- Do not access, modify, or keep other people's data. If you stumble on it, stop and tell us.
- Report to
security@uwitz.organd give us reasonable time to fix it before publishing.
Research we publish about third-party software is our own independent work, offered for information. It is a snapshot of what we found at the time, not a certification, and not advice for your particular system.
5. Donations
- Donations are voluntary and, unless the law says otherwise, non-refundable. If something went wrong — a duplicate charge, a wrong amount — email
hello@uwitz.organd we will sort it out. - Monthly donations continue until you cancel. Email us to cancel; we will not make it difficult.
- A donation buys nothing. It is not a purchase, a subscription to a product, a support contract, or influence over what we build or publish.
- Card payments are processed by Stripe under Stripe's own terms. All Stripe transactions are processed via our Financial Representative based in Malaysia.
- We make no claim here about the tax treatment of your donation. Check your own position.
- You confirm the money is lawfully yours to give. We may decline or return any donation, and we do not accept funding that comes with conditions on our research.
6. Our divisions
Uwitz runs two divisions with their own sites and their own terms:
- Uwitz Juniors — juniors.uwitz.org. Workshops, curriculum, and mentoring are governed by the terms published there.
- Uwitz Corporate — corp.uwitz.org. Paid engagements are governed by the signed contract for that engagement, which overrides this page entirely.
Nothing on this website is an offer of paid services, and nothing here creates a client relationship.
7. No warranty
The site, our software, and our research are provided "as is", without warranty of any kind, express or implied, including fitness for a particular purpose and non-infringement. We do not promise the site will be available, accurate, or uninterrupted.
Security tools reduce risk. They do not eliminate it. Nothing we publish guarantees you will not be compromised, and none of it is a substitute for advice about your own situation.
8. Liability
To the fullest extent the law allows, we are not liable for indirect, incidental, special, or consequential loss, or for lost data, profits, or revenue, arising from your use of the site, our software, or our research.
Where liability cannot be excluded, it is limited to the greater of the amount you donated to us in the previous 12 months, or EUR 100.
Nothing here excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded. If you are a consumer, your statutory rights are unaffected.
9. Governing law and contact
These terms are governed by Estonian law, and disputes go to the courts of Estonia. If you are a consumer in the EU, you may also have the right to bring proceedings where you live.
If any clause here is unenforceable, the rest stays in force.
Questions: hello@uwitz.org. Security: security@uwitz.org.