Legal

Terms of Service

Last updated: July 21, 2026

1. Acceptance of Terms

By creating an account or using RockTunnel (the "Service") — including the localhost tunnel feature, API playgrounds, webhook inboxes, mock API servers, and public documentation pages — you agree to these Terms of Service ("Terms"). If you are using the Service on behalf of a team or organization, you represent that you have authority to bind that team to these Terms.

2. What RockTunnel Is

RockTunnel is a developer platform that lets you:

Expose local servers via tunnels — assign a persistent public subdomain to a port on your machine for development and testing
Build and share API playgrounds — define collections of HTTP endpoints, run them from the browser, manage environment variables, and share live documentation pages with teammates, QA, or clients
Inspect webhooks — receive and log incoming HTTP requests from third-party services through dedicated inbox URLs
Create mock API servers — define fake endpoints that return custom responses so frontend developers can build without a real backend

3. Your Account

Sign-in is via Google OAuth only — there is no email/password option. You are responsible for keeping your Google account secure and for all activity that occurs under your RockTunnel account. Tunnel tokens are shown once at creation and cannot be recovered; store them securely. If you suspect your account has been compromised, contact us immediately at hellorocktunnel@gmail.com.

4. Workspaces and Team Roles

Every account belongs to at least one workspace. Workspaces have three roles:

Owner — full control, including deleting the workspace and managing all members
Admin — can invite and remove members, but cannot delete the workspace
Member — can use all workspace resources (playgrounds, tunnels, webhooks, mock servers) but cannot manage members or invitations

Workspace owners are responsible for the actions of all members they invite. Only Owners and Admins may send invitations. Invitation links expire after 7 days and are single-use. RockTunnel is not responsible for disputes between workspace members.

5. Free Plan Limits

The Free plan is subject to the following limits per workspace:

2 API playgrounds
10 endpoints per playground
2 webhook inboxes
2 mock servers

These limits are enforced at the API level. Attempting to exceed them will return an error. Upgrade to a paid plan to raise or remove these limits.

6. Acceptable Use

You may use the Service for lawful development, testing, and documentation of software. You agree not to:

Use tunnels or mock servers to serve malware, phishing pages, or other malicious content to end users
Route traffic through tunnels to conduct unauthorized access to third-party systems
Use webhook inboxes to exfiltrate data from services you do not own or have permission to interact with
Deliberately generate load to disrupt RockTunnel infrastructure or other users
Attempt to bypass free-plan limits, authentication, or Row Level Security controls
Share or publish playground documentation pages containing credentials, tokens, or private API keys
Create accounts for the purpose of reselling access to the Service

Violation of these rules may result in immediate suspension without notice.

7. Tunnel Tokens

When you create a tunnel, a token prefixed with rt_ is generated. The raw token is shown once and is never stored by RockTunnel — only a SHA-256 hash and a 10-character preview are retained. If you lose your token, you must revoke it and generate a new one. You are responsible for the security of any token you distribute to team members or embed in scripts.

8. Environment Variables and Secrets

Environment variables stored in API playgrounds — such as API keys, bearer tokens, or passwords — are encrypted with AES-256-GCM before being written to the database. Despite this, you should treat playground environment variables as developer-convenience storage, not a secrets manager. Do not store production credentials that grant access to critical infrastructure.

9. Public Documentation Pages

Each API playground can generate a public documentation page accessible to anyone with the link. You are solely responsible for what you include in those pages. Do not publish documentation containing real credentials, internal IP addresses, or sensitive business data.

10. Intellectual Property

Our platform

The RockTunnel application code, design, and branding are owned by RockTunnel. You may not copy, reverse-engineer, or redistribute them without written permission.

Your content

You retain full ownership of your playground definitions, mock server routes, tunnel configurations, and any data that passes through the Service. By using the Service you grant RockTunnel a limited license to store and transmit your content solely to operate the Service.

11. Service Availability

The tunnel relay infrastructure depends on external DNS and hosting providers. We aim for high availability but do not guarantee uninterrupted access to tunnels, playgrounds, or any other feature. The Service is provided "as is." We are not liable for losses caused by downtime, expired tokens, missed webhooks, or data loss.

12. Termination

You may stop using the Service at any time. You can request full account and data deletion by emailing hellorocktunnel@gmail.com. We may suspend or terminate your access for violation of these Terms, abusive use of tunnels or mock servers, or extended inactivity on a Free plan. On termination your data will be removed within 30 days.

13. Limitation of Liability

To the maximum extent permitted by law, RockTunnel is not liable for indirect, incidental, consequential, or punitive damages arising from your use of the Service, including but not limited to data loss, tunnel downtime, or webhook delivery failures.

14. Changes to These Terms

If we make material changes — such as adding new restrictions on acceptable use or changing how features work — we will notify you by email at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the revised Terms.

15. Contact

Questions about these Terms? Email us at hellorocktunnel@gmail.com.