1. Who we are and what Deckproof does
Deckproof (https://deckproof.dev) is operated by Jonas Klein, c/o Impressumservice Dein-Impressum, Stettiner Str. 41, 35410 Hungen, Deutschland ("we"). Deckproof checks publicly reachable websites automatically and read-only for security, EU legal-information and quality characteristics and presents the result as a report with a grade.
2. Acceptable use
You may only check websites you own or are authorised to test. Using Deckproof to prepare attacks, to harass third parties, or in a way that impairs the service is prohibited. We limit the number of scans per connection and may suspend accounts that abuse the service.
By starting a check you confirm that you own the website or are authorised to test it. If you are a business customer (not a consumer), you indemnify us against claims by third parties that arise because you checked a website you were not authorised to test, to the extent you are responsible for that.
3. Free check, paid report, subscriptions
The grade and the list of problems are free. Every fix, the evidence, the exposure proof, the PDF report and further features are paid. Prices are shown before purchase and include VAT where applicable.
One-off report (EUR 9; if a time-limited promotional price applies, we show it before payment, and the price shown at checkout is the one that counts): unlocks every fix for the checked site. After the purchase you get an address of your own for that report (a link carrying a personal key), which we show you on screen and also send by email. Your purchased report stays reachable at that address with no login and with no time limit, and it shows exactly the result you paid for. Anyone holding the link can read the report, so keep it like a password. Re-checks of the same site are included for 7 days from purchase. If you lose the link we will resend it to the email address used for the purchase. Should we shut the service down, we will announce it on the website at least 30 days in advance so you can save your report as a PDF.
Pro and Agency: monthly subscriptions that renew automatically until cancelled. Price changes are announced at least 30 days in advance and never apply to a running period.
3d. Cancellation
Every page carries a Cancel contracts here button in the footer. It leads straight to the confirmation page required by § 312k of the German Civil Code. You declare the cancellation there without signing in and without a password, and we confirm receipt by email straight afterwards, with the wording of your declaration, the date and time it reached us, and the date the contract ends. An ordinary cancellation takes effect at the end of the period you have already paid for, a cancellation for cause takes effect at once. An informal email to hallo@deckproof.dev is just as effective; the button is the faster route, not an extra hurdle.
4. Payment and merchant of record
Purchases are processed by Paddle.com Market Ltd, 30 Old Bailey, London EC4M 7AU, United Kingdom, which acts as merchant of record. Paddle handles payment, tax and invoices and appears on your statement. Your contract for the purchase is with Paddle; Paddle's buyer terms apply to the transaction. We never see your card details.
5. Right of withdrawal
Who your contract is with: your purchase contract is with Paddle.com Market Ltd (section 4), so a withdrawal is declared to Paddle. You do not have to approach Paddle yourself: we take your declaration as a receiving agent for Paddle and pass it on without delay. There is one recipient, and you reach it through us.
If you are a consumer, you may withdraw from this contract within fourteen days without giving any reason. The period starts on the day the contract is concluded. The quickest route is the Withdraw from contract button in the footer of every page; it leads straight to the withdrawal function required by § 356a of the German Civil Code, with no sign-in and no password. Any other clear statement works just as well, for example an email to hallo@deckproof.dev, a statement direct to Paddle, or the model form in the German version. We confirm receipt immediately, with the wording of your declaration and the date and time it reached us, and the refund follows within fourteen days of that.
Digital content: for digital content not supplied on a physical medium, the right of withdrawal ends early under § 356(6) of the German Civil Code only if performance had begun, you expressly consented in the order process to it beginning before the period runs out, you acknowledged that the right thereby expires, and you were given a confirmation under § 312f of the German Civil Code. Our payment provider's checkout does not currently collect that consent. For as long as that is the case we treat the right of withdrawal as intact: the one-off report can also be withdrawn within fourteen days without reasons, for a full refund.
Subscriptions: withdraw from a new subscription within fourteen days and we refund the first payment in full. We do not charge for the part of the period already used, because that too would require an express request in the order process. After the fourteen days, and on renewals, cancellation to the end of the paid period applies, see section 3d.
Our refund policy is part of these terms and covers what we refund beyond the statutory right: reports we failed to deliver or got wrong, and outages of more than 24 hours.
6. Accounts
Signing in works with an email link; there is no password. You are responsible for the mailbox you sign in with. We may delete accounts that have not been used for 24 months after notice by email.
7. What a result is, and what it is not
An automated, passive scan sees only what any visitor sees. A good grade is not proof of security or legal compliance and does not replace a penetration test or legal advice. Statements on legal topics are general information with sources, not an assessment of your individual case (keine Rechtsberatung).
A result is a snapshot of the moment of the check and covers only the checks listed on the checks page. A check can miss a problem (false negative) or report one that does not exist (false positive), and the website can change after the check. You remain responsible for your website and for the decisions you take on the basis of a report.
7a. Fixes and fix prompts
Fixes, code examples and prompts for AI builders are suggestions, and some of them are generated automatically. Take a backup and test a change before you apply it to a live website. Whether and how you apply a fix is your decision.
7b. Monitoring and alerts (Pro and Agency)
Daily re-checks and alert emails are provided on a best-effort basis. An alert can be delayed or fail to arrive, for example because of an email delivery problem or because the website could not be reached. Monitoring does not replace your own monitoring or your own incident process.
7c. Effects on the checked website
A check sends the same kind of requests a visitor's browser sends. The browser pass opens the page and clicks the cookie banner the way a visitor would. Firewalls, rate limits or alerting systems of the checked website may react to this. By running a check you accept that.
7d. Reports passed on to third parties (Agency)
If you give a report, a client link or the grade badge to a client or another third party, you do so on your own responsibility and within your own advice and your own contract. We owe our duties to you only, not to your clients. A report is not meant to be relied on by third parties, and it creates neither a contract with them nor protection in their favour.
7e. Availability and changes
We aim for the service to be available at all times but do not promise uninterrupted operation. We may change checks, scoring and features, for example to follow new findings or new rules. A report you have already bought keeps showing the result you paid for, as described in section 3.
8. Public report pages
If you tick "list this grade publicly on deckproof.dev" when you check an address, you agree that the grade and the names of the findings may be shown at a public address. Evidence, samples and fixes are never public. Owners of a checked site can request removal at any time by email to hallo@deckproof.dev.
9. Liability
(1) We are liable without limit for intent and gross negligence, for injury to life, body or health, for defects we have fraudulently concealed, for guarantees we have expressly given, and under the German Product Liability Act.
(2) For slight negligence we are liable only for the breach of an essential contractual duty, meaning a duty whose fulfilment makes proper performance of the contract possible in the first place and on which you may regularly rely, and then only up to the foreseeable damage typical for this kind of contract. In all other cases liability for slight negligence is excluded.
(3) Where we are liable for the loss of data under paragraph 2, this covers only the effort of restoring the data that would have arisen if you had made regular backups appropriate to the risk.
(4) The free check and the free grade are provided without charge. For them we are liable only in the cases of paragraph 1.
(5) Paragraphs 2 to 4 also apply to the liability of our legal representatives and vicarious agents. Liability that cannot be limited by mandatory law remains unaffected.
10. Governing law
German law applies. If you are a consumer, the mandatory consumer-protection rules of the country where you usually live remain unaffected. Should individual provisions be invalid, the rest remains in force.
Last updated: 19.10.2026