Printed codes are trusted: people scan them without seeing where they lead. This policy exists to keep that trust. It is part of the Terms of Service.
01What you may not point a code at
- phishing, or pages that collect passwords, payment or identity details under a false identity
- malware, unwanted software, or anything that exploits a device
- content that is illegal where it is published or where it is scanned
- impersonation of another person, business or public body
- sexual content involving minors, violent extremism, or content that incites harm
- scams, deceptive offers, or redirects that disguise where a scan really goes
- material that infringes someone else’s intellectual property
02What you may not do with the service
- send spam or unsolicited messages through forms, email or SMS codes
- get around plan limits, rate limits or a suspension, for example with multiple free accounts
- probe, scan or load-test our systems without written permission
- resell the service without being in the partner programme
- use Hosted Pages to host files unrelated to a code, or as general file storage
03How we check and what we do
We may check destinations against lists of unsafe sites and our own blocklist when a code is created or changed and periodically afterwards, and we review reports from people who scan codes.
If a destination is confirmed harmful we may disable the code and show a safety notice to anyone who scans it. For serious or repeated breaches we may suspend the Workspace. Where we can, we will tell you and give you a chance to fix it.
04Reporting abuse
If a Dotwick code led you somewhere harmful, write to abuse@dotwick.com with the short link or a photo of the code. We look at every report.
Questions about these documents
Write to legal@dotwick.com. For a signed DPA or a security review, our Enterprise team can send the standard pack.
Security practices, the sub-processors and where SOC 2 stands: Dotwick Trust