01About these terms
These terms are between you and Bramble Labs Inc. and govern Burrow’s website and our hosted tunnel service. By using them, you agree to these terms. You must be legally able to accept, obtain any required parental or guardian permission, and have authority if acting for an organization.
The Privacy policy explains information handling. Software licences and any separately agreed service terms also apply to their respective subject matter.
02What a tunnel does
Burrow gives a local HTTP service a public HTTPS URL and provides terminal tools for connection management and request inspection. Public URLs are accessible to anyone who can reach them. You are responsible for choosing what you expose and for your application’s authentication, authorization, content, and notices.
A tunnel-management credential does not authenticate visitors to the exposed application. Burrow is not a private VPN, a backup service, or a guarantee that an application is safe to make public. Website examples are illustrations and do not create real tunnels.
03Credentials and your responsibilities
Keep the CLI’s owner credentials secure, use a trusted server origin, and close tunnels you no longer need. You are responsible for use you authorize and for having permission to expose a service, system, or dataset. Tell us about suspected credential compromise without including credentials in public issues or ordinary email.
You retain your rights in your application and content. You authorize us and our providers to transmit and technically process traffic as needed to operate the tunnels you request. This is not a transfer of ownership or permission for unrelated advertising use.
04Acceptable use
Do not use Burrow to distribute malware, host phishing or fraudulent pages, send spam, infringe rights, distribute illegal content, expose systems without authorization, bypass access controls, steal credentials, or disrupt infrastructure. Do not attempt to claim another owner’s tunnel or evade usage and abuse controls.
You are responsible for complying with laws and third-party terms applicable to your exposed service and visitor data. Report abuse or security concerns to burrow@mawa.dev, including the relevant URL and a concise description without unnecessary sensitive data.
05Availability and changes
Burrow is intended for development workflows. Connections can be interrupted, expired, revoked, or unavailable; a URL is not a promise of permanent hosting or a service-level agreement. Keep your local work and important records independently.
We may change features, impose reasonable capacity limits, or discontinue hosted features with notice where required. Any paid offering must disclose its price, renewal, and cancellation terms before purchase; using these terms does not itself start a paid subscription.
06Open source and self-hosting
Burrow’s open-source components are governed by their published licences, including the MIT licence where stated. These terms do not take away those licence permissions. They govern the website and hosted infrastructure we operate.
If you self-host, you are responsible for operating, securing, and maintaining that deployment, its certificates and storage, and its privacy and acceptable-use arrangements. We do not operate third-party deployments or the applications tunnel owners expose.
07Suspension and ending use
You may stop using Burrow and close your tunnels at any time. We may restrict or suspend access where reasonably needed to address abuse, security, legal requirements, or material violations. We will provide notice or a review path where appropriate; urgent risks may require immediate action.
Closing a tunnel revokes its identifier and clears its request history under the Privacy policy. Minimal anti-reassignment records and applicable operational records can remain. Contact us if you believe a restriction was mistaken.
08Responsibility and legal rights
To the extent permitted by law, Burrow is provided as available without guarantees of continuous connectivity, compatibility with every local application, or suitability for a particular purpose. We remain responsible for obligations and care required by applicable law.
To the extent permitted by law, we are not liable for indirect or consequential loss, lost profits, or independent third-party failures. This does not exclude liability that cannot lawfully be excluded, including fraud, intentional misconduct, or mandatory consumer rights. Nothing requires arbitration or removes a legally guaranteed complaint or court remedy.
09Updates and contact
We may update these terms and will provide notice or obtain renewed acceptance where required. If a provision is unenforceable, the rest continues to the extent lawful. Ownership, accrued obligations, and provisions that reasonably need to survive continue after access ends.
Contact burrow@mawa.dev for service, legal, privacy, or rights-holder questions.