Terms of service

1. Who we are and what this covers

Package Firewall ("we", "us") provides the Package Firewall desktop app and the related online service. By installing or using it, or by subscribing, you agree to these terms. Questions: hello@packagefirewall.com.

2. What the service does, and what it doesn't

With an active subscription, Package Firewall checks downloads from the public npm and PyPI registries against a signed malware list and a 48-hour age rule, as described on how it works. It reduces the risk of installing malicious packages. It cannot promise to catch every one, and it does not cover everything listed under "not covered yet" on that page.

Without an active subscription, the app does not filter installs. If you have never subscribed, are signed out, or your subscription has ended, traffic passes through unchecked.

3. Your account

You sign in with your email address. Keep access to it, because that is how you sign in. One licence covers up to 5 of your devices. You are responsible for what happens on your account.

4. Subscription, price and automatic renewal

• The individual plan costs $30 US dollars per year. Taxes are added at checkout where they apply.
• The subscription renews automatically every year, on the anniversary of your first payment, and we charge the card you gave at checkout, at the price then in force. We will tell you in advance if the price changes, and a change never applies to a year you have already paid for.
• There is no free trial.

5. Invite codes and the student licence

An invite code gives you a free period on the subscription. We still collect a card at checkout. When the free period ends, the subscription renews at the full price and your card is charged, unless you cancel before the renewal date. Your licence shows the date, and the payment provider may send its own emails.

The student licence is a one-time free licence for 4 years. No card is collected and nothing renews: when it ends, filtering stops unless you subscribe. If you claim it while you have a paid subscription, that subscription stops renewing.

We may change or withdraw invite codes and the student licence for new sign-ups at any time. Codes are for the person we gave them to. We can end a free period or licence obtained by misusing a code or by claiming the student licence without being eligible.

6. Payments

Payments are processed by Polar (polar.sh), our merchant of record. Polar is the seller of the subscription, collects payment and handles sales tax and VAT. Polar's own terms apply to the purchase. We never see your full card number.

7. Cancelling

You may cancel at any time from the app, which opens your customer portal. Cancelling stops the next renewal and takes effect at the end of the year you have paid for. You keep the service until then. You can undo a cancellation before the end date.

8. Refunds

See the refund policy. In short: a full refund on request within 14 days of any charge, and case by case after that. If a payment is refunded, the subscription ends. Nothing in these terms limits any right to a refund or cancellation that the law gives you.

9. Acceptable use

Do not use the service to attack or overload it, to get around licence limits (for example by sharing one licence across more than 5 devices) or to resell it. Do not copy the signed malware list for use outside the app.

10. Deleting your account

You can delete your account in the app. This cancels your subscription immediately, with no automatic refund (see the refund policy). We may close accounts that break these terms.

11. Availability and changes

Package Firewall is in early access and is provided as is. We try to keep the service running but do not promise it will always be available or error free. We may change the service and these terms. If a change matters, we tell you in the app or by email before it takes effect, and you may cancel if you do not agree.

12. Liability

To the extent the law allows, we are not liable for indirect or consequential loss, and our total liability to you for anything arising from the service is limited to what you paid us in the 12 months before the claim. Nothing excludes liability that cannot be excluded by law, including for fraud or death or personal injury caused by negligence, or any statutory consumer rights.

13. Privacy, governing law and contact

How we handle personal data is explained in the privacy notice. The governing law and courts will be stated here once confirmed. Write to hello@packagefirewall.com with any question or complaint.