Short links only work when people trust them. This policy defines what may not be done with in.bio and how we enforce it. It applies to every link created on the Service — anonymous or account-owned, free or paid — and is part of our Terms of Service.
1. Prohibited uses
You may not create or use in.bio links to point to, distribute, or facilitate:
- Phishing and credential theft — pages that impersonate other brands, services, or people to collect credentials, payment details, or personal information.
- Malware — viruses, ransomware, spyware, unwanted software, or drive-by downloads.
- Spam — unsolicited bulk messaging in any channel (email, SMS, social, comments) using in.bio links, or links created in bulk to evade platform filters.
- Deceptive redirects — cloaking, bait-and-switch destinations, fake system warnings, forced downloads, or otherwise misrepresenting where a link leads.
- Illegal content — including child sexual abuse material (reported to authorities immediately), terrorism content, sale of illegal goods, and content that infringes intellectual property rights.
- Harassment and hate — content that harasses, threatens, or incites violence against people or groups.
- Privacy violations — doxxing, non-consensual intimate imagery, or covert tracking of individuals.
- Impersonation slugs — custom slugs that imitate brands, payment providers, or security pages (many such words are reserved outright) to make a link look official.
- Technical abuse — shortening other shorteners to hide destinations, redirect chains designed to evade scanning, links to private/internal network addresses, evading rate limits with rotating IPs or bulk anonymous automation, or reselling access to our free endpoints. (Automation through the documented APIs, SDKs, and MCP server within published rate limits is welcome.)
2. How we enforce this policy
- At creation: destinations are checked against blocklists, and obviously malicious or malformed URLs are rejected. Rate limits and captchas slow down bulk abuse.
- After creation: every destination is scanned automatically — redirect chains are resolved and final destinations inspected. Suspicious links get a warning interstitial; confirmed malicious links are disabled and their owners notified.
- Account level: repeated violations lead to account suspension. All enforcement actions are logged and reviewed by humans.
- We may take any of these actions without prior notice where harm to users is imminent. If you believe a link or account was disabled in error, contact us and a human will re-review it.
3. Reporting abuse
Anyone — with or without an account — can report a link at in.bio/report-abuse. Every report is reviewed by our team. You can also inspect any short link before clicking it by prefixing it with /preview (for example, in.bio/preview/abc123 shows where in.bio/abc123 leads).
4. Changes
We may update this policy as new abuse patterns emerge. Material changes are announced the same way as changes to our Terms of Service.
5. Contact
Questions about this policy: hello@in.bio. To report a link, use the abuse report form.