Terms of service

Last updated: 29 September 2026 · version 2026-09-29.1

This is an English translation provided for convenience. The legally binding version is the Spanish original; if they differ, the Spanish version prevails.

These terms govern the use of WebBorder, the service of Carlos Alvarez Santana, Tax ID 16814826D (hereinafter “we”; full details in the legal notice). By creating an account you accept them; we keep the date and version you accepted.

1. What WebBorder is

WebBorder periodically visits the websites you add, learns what they're like and alerts you when it detects changes you haven't approved: texts, links, forms, scripts, redirects or content shown only to search engines. It also checks whether the website responds and when its HTTPS certificate expires, and alerts you if it goes down and when it's back. It is a detection and alerting tool.

2. Your account

You must be over 18 and give us an email address that is yours and works: that's where the alerts go.
Keep your password safe: you are responsible for what is done with your account. If you think someone knows it, change it and let us know.
You can delete your account whenever you like from the dashboard. It is deleted at once, with all your websites and their history.

3. Only websites you control

You may only add websites that you own or for which you have the owner's authorisation (for example, the agency that manages a client's website). Before monitoring a website we ask you to prove it with a DNS record or a file on the website itself. By doing so, you declare that you have the right to do it and authorise us to visit that website under point 4. If the website is hosted with a provider whose terms limit automated visits, making sure it's allowed is up to you.

You may not use WebBorder to monitor other people's websites without permission, to load or attack any website, to try to access systems that aren't yours, to get around your plan's limits or to resell the service without an agreement with us. If we detect such use, we may suspend the account.

4. How we visit your website

To detect what is hidden from a website's owner, WebBorder visits it as a desktop browser, a phone, Google's crawler and someone arriving from Google would, and downloads the pages and the scripts they link to, within your plan's page limit. Visits are spaced out so as not to load your website. In addition, to know whether it's available, it requests the home page once every minute or every five minutes, depending on the plan, and repeats it after 30 seconds if it doesn't respond. Before alerting you to an outage, unless you turn it off in the website's settings, we confirm it from probes in other countries of the Globalping service: for this, your website's address is sent to that service, and the result of those checks (whether it responded, with which code and how quickly, without the page content) is public on Globalping. You can pause monitoring or remove the website whenever you like. What we store from your website is used only to provide you with the service.

Once a week, and whenever you ask, we also carry out an external security review: we request a few specific addresses on your website (for example, /.env, /.git/HEAD or /wp-json/wp/v2/users) to check whether files or information are exposed, and we read the software versions the website itself announces, its security headers, which TLS versions it accepts and your domain's SPF and DMARC records. These are around twenty read requests: we don't try passwords, submit forms or attempt to exploit any flaw. By registering the website and accepting these terms, you consent to this review. If you have the Escudo add-on, we also check the detected software against Wordfence Intelligence's public vulnerability database (Defiant, Inc.).

5. What WebBorder does and doesn't do

WebBorder detects and alerts; it doesn't stop anyone getting into your website, doesn't fix anything on it and doesn't replace backups, updates or a security service.
No tool detects everything: there may be changes we don't see (for example, those shown only to certain visitors or that happen between two checks) and alerts about changes that turn out to be legitimate.
Alerts depend on email and third-party networks, and may be delayed or not arrive. Check the dashboard too.
The evidence we keep when we detect a change, on the plans that include it (signed, timestamped copies of what your website was serving, and a history in which each entry carries the fingerprint of the previous one) is electronic evidence produced by a third party. Its weight in proceedings is assessed by the judge or court; for litigation, it's advisable for a forensic expert or a notary to take it on or supplement it.
Availability is checked from a single point on the Internet: an outage affecting only other areas or networks may not be seen, and the percentages we show are indicative, not an availability commitment for your website.

6. Plans and price

During the current phase the service is free, on all its plans. When it becomes paid we will give you at least 30 days' notice, with the prices and terms, and we won't charge you anything you haven't expressly accepted. If you don't accept, you can stay on the free plan or delete your account.

7. Availability

We try to keep the service always working, but we don't guarantee it will be available without interruption: there may be stoppages for maintenance, faults or causes beyond our control. While it is free there is no service level commitment.

8. Liability

We are liable for damage we cause through wilful misconduct or gross negligence and for anything the law doesn't allow to be excluded, including your rights as a consumer if you are one. Beyond that, and to the extent the law allows, we are not liable for damage arising from attacks or changes to your website that WebBorder didn't detect or detected late, nor for decisions you take based on an alert. If you use the service as a professional, our total liability is limited to what you paid us in the twelve months before the event giving rise to it.

9. Intellectual property

WebBorder, its code, its design and its brand are ours. Your website and its content are yours: we only use what we see on it to provide you with the service.

Nor may you copy, decompile or reverse-engineer WebBorder or its code, except to the extent the law allows you to do so despite these terms. Nor may you access the service with bots or other automated means other than those we provide, extract its data in bulk, or use it to build a competing service.

10. Suspension and end of the service

We may suspend or close an account that breaches these terms, giving notice first unless immediate action is needed to protect third parties or the service. If we ever close WebBorder, we will give you at least 30 days' notice so you can download your data; after that it will be deleted.

11. Personal data

Your data as a customer is processed under the Privacy policy. Any personal data on the websites you monitor is processed by us as processors on your behalf, under the annex below.

12. Changes to these terms

If we change them, we will let you know by email or in the dashboard at least 15 days before they apply. If you don't agree, you can delete your account before that date.

13. Law and courts

These terms are governed by Spanish law. If you are a consumer, you may bring a claim before the courts of your place of residence, and you keep the protection of the mandatory consumer law of your country. If you use the service as a professional, the parties submit to the courts of the service owner's place of residence.

Annex · Data processing agreement (article 28 GDPR)

This annex is part of the terms and applies to any personal data on the websites you add.

Parties and roles. You (the customer) are the controller of that data; we are the processor.
Subject matter, nature and purpose. Visiting the websites added, storing what is seen on them and comparing it between visits to alert you to changes; and, on the plans that include it, when a change appears, keeping as evidence a signed copy of the affected pages and scripts, which you can download. We do nothing else with that data.
Type of data and data subjects. Whatever you publish on your website: usually identification and contact data (names, phone numbers, emails) of the people who appear on it. We don't look for special categories of data; if your website publishes them, it is your decision to publish them.
Duration. While the website remains registered. When you remove it or delete your account, we delete that data at once; from the daily backups, which are only used to restore the service if it fails, it disappears within 3 days at most.
Instructions. We process the data only on your instructions, which are these terms and what you configure in the dashboard, unless a law requires otherwise (in which case we would tell you, if the law allows).
Confidentiality. Anyone accessing the data on our side is bound by confidentiality.
Security. We apply the measures of article 32 GDPR described in the privacy policy: encryption in transit, isolation between accounts, server in the EU and isolated service.
Sub-processors. You authorise us to use IONOS SE for hosting; for sending alerts, the email provider listed in the privacy policy; and, to confirm outages unless you turn it off, Volentio JSD Ltd (Globalping, United Kingdom), which only receives the website's address. We will tell you before adding or changing sub-processors, and you can object by deleting your account.
Help with rights and obligations. We will help you respond to data subjects' requests and meet your obligations on security, breach notification and impact assessments, as far as it depends on us.
Breaches. If we suffer a breach affecting that data, we will tell you without undue delay and, in any case, within 48 hours of becoming aware of it, with the information available.
Demonstrating compliance. We will give you the information needed to show we comply with this annex and will accommodate reasonable audits, with prior notice.

Back to WebBorder · Legal notice · Privacy · Cookies