1. Introduction
These Terms of Service constitute a binding legal agreement between you and the operator of Lurk, accessible at lurk.st. By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, cease using the Service immediately.
Lurk is a professional tool intended for cybersecurity professionals, penetration testers, red teams, independent security researchers, journalists, and other authorized users conducting legitimate open-source intelligence research.
Lurk operates with a privacy-first model. We do not collect personal information beyond what is strictly necessary for payment processing. Access is provided through anonymous cryptographic tokens. There are no user accounts, no email addresses stored, no logs retained, and no identity verification required.
2. Eligibility
By accessing the Service you confirm that you are at least 18 years of age, possess legal capacity to enter binding contracts, are not prohibited from using the Service under applicable law, and will use the Service for lawful purposes only.
3. Token-Based Access
Access is provided exclusively through anonymous cryptographic tokens modeled after privacy-preserving mechanisms used by services such as Mullvad VPN.
Your token is generated upon payment and displayed once. Only a cryptographic hash is retained on our systems for validation. If you lose your token, access is permanently lost. We cannot recover tokens, reset access, or identify token holders. This is by design.
4. Prohibited Activities
You are expressly prohibited from:
- Stalking, harassment, doxxing, or targeting individuals
- Identity theft or unauthorized account access
- Credential stuffing or account takeover attacks
- Penetration testing without explicit written authorization
- Automated scraping or bulk data harvesting, regardless of intent
- Reselling or redistributing data obtained through the Service
- Any use targeting minors
- Circumventing rate limits or security controls
- Using the Service from sanctioned jurisdictions
Violations result in immediate token revocation without refund.
5. No Refund Policy
All payments are made in cryptocurrency. Crypto transactions are irreversible by technical nature. All sales are final. We do not offer refunds for any reason including unused time, lost tokens, or service dissatisfaction.
6. Data Sourcing
Lurk does not breach systems, hack, or commission data breaches. We query third-party APIs (third-party data providers) that return publicly disclosed information. We do not store raw breach databases or plaintext passwords. All breach data has been previously disclosed through third-party incidents.
The appearance of an identifier in search results does not indicate wrongdoing by that individual. Users must exercise professional judgment when interpreting results.
7. Disclaimer of Warranties
The Service is provided AS IS and AS AVAILABLE without warranties of any kind. We do not warrant accuracy, availability, or fitness for any particular purpose. Data from third-party sources may contain inaccuracies or false positives.
8. Limitation of Liability
Our total liability shall not exceed the amount you paid in the twelve months preceding any claim. We are not liable for indirect, incidental, or consequential damages of any kind.
9. Governing Law
These Terms are governed by the laws of Sweden, consistent with the jurisdiction used by comparable platforms benefiting from Swedish constitutional protections for freedom of information.
10. Contact and Opt-Out
To opt out of search results or exercise GDPR rights: lurk.st/optout
For data protection inquiries: lurk.st/contact