Effective date: October 25, 2026
Last updated: October 25, 2026
These SecretUndo Terms and Conditions (“Terms”) govern your access to and use of SecretUndo, a developer-security service operated by StoryTimeAndConfessions (“StoryTimeAndConfessions,” “we,” “us,” or “our”).
By creating an account, connecting a repository, installing the SecretUndo GitHub App, or otherwise using SecretUndo, you agree to these Terms. If you do not agree, do not use SecretUndo.
1. The SecretUndo service
SecretUndo is designed to help users identify and remediate credentials, tokens, keys and other secrets that may have been exposed in software repositories or development workflows.
Depending on the available features and permissions you authorize, SecretUndo may provide:
- Credential and secret detection;
- Commit, pull-request and repository-history analysis;
- Duplicate-incident consolidation;
- Credential ownership and blast-radius assessment;
- Validity and revocation checks;
- Confirmation-gated credential rotation or revocation;
- Cleanup recommendations and history-rewrite plans;
- Remediation pull requests; and
- Audit information and remediation verification.
Features may differ depending on the repository, provider, permissions, integration availability and technical limitations.
2. Eligibility
You must be at least 18 years old and legally capable of entering into an agreement to use SecretUndo.
If you use SecretUndo for a business, employer or other organization, you represent that you have authority to accept these Terms on its behalf and to connect the relevant accounts, organizations and repositories.
3. Google authentication
A supported Google account is required to register for and access SecretUndo. You are responsible for protecting your Google account and for all activity performed through your authenticated SecretUndo session.
You must provide accurate account information and must not access SecretUndo through another person’s Google account without authorization.
If you believe your Google or SecretUndo account has been compromised, revoke active access where appropriate and contact [email protected].
4. GitHub authorization
You may connect only GitHub accounts, organizations and repositories that you are authorized to administer or access.
You control repository access through the GitHub App installation process. You are responsible for:
- Selecting the correct GitHub account or organization;
- Selecting appropriate repositories;
- Reviewing requested GitHub App permissions;
- Maintaining appropriate organizational approval; and
- Suspending or uninstalling the GitHub App when access is no longer required.
SecretUndo’s access may stop if you remove permissions, uninstall the GitHub App, change repository access or if GitHub suspends an integration.
5. Your responsibilities
You are responsible for:
- Maintaining secure backups and appropriate version-control protections;
- Reviewing every detected incident and remediation recommendation;
- Confirming credential ownership and affected environments;
- Testing proposed changes before deploying them;
- Coordinating credential rotation with affected teams and systems;
- Verifying that applications continue to work after rotation or revocation;
- Keeping emergency recovery and rollback procedures available; and
- Complying with the rules and policies of Google, GitHub and credential providers.
You must not treat SecretUndo as the sole control protecting your repositories or infrastructure. Appropriate code review, least-privilege access, provider monitoring, backups and incident-response procedures remain your responsibility.
6. Confirmation-gated remediation
Credential rotation, revocation, repository changes and Git-history rewriting can interrupt applications or permanently alter development history.
SecretUndo is designed to require confirmation before performing supported high-impact remediation actions. By confirming an action, you represent that:
- You are authorized to perform it;
- You reviewed the affected provider, credential and environment;
- You understand the operational consequences;
- You have coordinated any necessary application updates; and
- You accept responsibility for the approved action.
Do not approve a rotation, revocation, cleanup or rewrite action unless you understand its effect.
7. Detection limitations
Secret detection is probabilistic and cannot guarantee that every credential exposure will be found. SecretUndo may produce false positives, false negatives, incomplete ownership information or an incorrect validity assessment.
A result marked invalid does not guarantee that a credential never worked, that every copy was revoked, or that related access has been eliminated. A result marked valid does not guarantee that the credential belongs to you or that remediation is safe.
You must independently evaluate material security incidents and use qualified security personnel where appropriate.
8. Prohibited use
You may not use SecretUndo to:
- Access, scan or modify systems, accounts or repositories without authorization;
- Collect, validate, rotate, revoke or exploit credentials belonging to another person without permission;
- Conduct credential theft, phishing, malware delivery or unauthorized surveillance;
- Evade security controls or conceal unlawful activity;
- Disrupt SecretUndo, its providers or other users;
- Probe or exploit SecretUndo except through an expressly authorized security-testing program;
- Upload malware or deliberately submit live secrets through support channels;
- Resell, sublicense or misrepresent SecretUndo without written permission;
- Violate applicable law, contractual restrictions or third-party rights; or
- Use automated methods that create unreasonable traffic or operational burden.
We may restrict or terminate access when we reasonably believe the service is being abused or presents a security risk.
9. Free availability and future features
SecretUndo is currently offered without a mandatory subscription fee. Internet service, hosting, provider usage or third-party charges outside SecretUndo may still apply to you.
We may introduce optional plans or paid capabilities in the future. We will disclose applicable pricing and obtain the required agreement before charging for any paid service. These Terms do not authorize automatic charges.
10. Third-party services
SecretUndo relies on or interoperates with third-party services such as Google, GitHub, Cloudflare, Hostinger, Resend, Amazon SES and supported credential providers.
Those services are governed by their own terms, privacy policies, availability and technical limitations. StoryTimeAndConfessions does not control and is not responsible for independent third-party services.
A provider may change or discontinue an API, permission, credential type or integration. This may limit or disable a SecretUndo feature without advance notice.
11. Service availability and changes
We aim to provide a reliable service but do not guarantee uninterrupted or error-free availability. SecretUndo may be unavailable because of maintenance, provider failures, security events, network conditions or circumstances beyond our reasonable control.
We may add, remove, limit or modify features to improve security, comply with law, respond to provider changes or protect users and infrastructure.
12. Intellectual property
SecretUndo, including its branding, interface, documentation, original software, visual design and service content, is owned by or licensed to StoryTimeAndConfessions and is protected by applicable intellectual-property laws.
These Terms grant you a limited, revocable, non-exclusive and non-transferable right to use SecretUndo for authorized internal purposes while you comply with these Terms.
You retain ownership of your repositories, code and other content. Connecting a repository grants us only the limited permission needed to operate the features you request.
13. Feedback
If you voluntarily provide ideas or suggestions about SecretUndo, you permit us to use that feedback to improve the service without an obligation to compensate you. This does not transfer ownership of your repositories, code or confidential information.
14. Privacy
Our processing of account, repository and security information is described in the SecretUndo Privacy Policy.
15. Account suspension and termination
You may stop using SecretUndo at any time. You may disconnect GitHub integrations and request account deletion using the published deletion process.
We may suspend or terminate access if:
- You materially violate these Terms;
- Your activity creates a security, legal or operational risk;
- We are required to do so by law or a provider;
- The service or relevant integration is discontinued; or
- Continued access could harm users, third parties or infrastructure.
Where reasonably possible, we will provide notice and an opportunity to address the issue, except where immediate action is necessary for security, safety or legal compliance.
16. Disclaimer of warranties
To the maximum extent permitted by applicable law, SecretUndo is provided on an “as is” and “as available” basis.
StoryTimeAndConfessions does not warrant that:
- Every exposed credential will be detected;
- Every alert will be accurate;
- Ownership or blast-radius conclusions will be complete;
- A remediation action will be free from interruption or side effects;
- Repository history can always be cleaned safely;
- Third-party services will remain available; or
- The service will be uninterrupted, error-free or completely secure.
Nothing in these Terms excludes a warranty or right that cannot lawfully be excluded.
17. Limitation of liability
To the maximum extent permitted by applicable law, StoryTimeAndConfessions will not be liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for loss of profits, revenue, data, goodwill, business opportunity or service availability arising from or related to SecretUndo.
This includes losses arising from an undetected secret, false alert, credential rotation, credential revocation, repository modification, history rewrite, provider outage, unauthorized account access or reliance on automated remediation guidance.
Nothing in these Terms limits liability where such limitation is prohibited by applicable law.
18. Indemnity
To the extent permitted by applicable law, you agree to defend and indemnify StoryTimeAndConfessions against third-party claims, damages and reasonable expenses resulting from your unauthorized or unlawful use of SecretUndo, your violation of these Terms, or your infringement of another person’s rights.
19. Governing law and disputes
These Terms are governed by the laws of India, without regard to conflict-of-law principles.
Before initiating formal proceedings, you agree to contact us and make a reasonable good-faith effort to resolve the dispute. Subject to applicable law, disputes that cannot be resolved informally will be submitted to a court of competent jurisdiction in India.
20. Changes to these Terms
We may update these Terms when SecretUndo’s features, providers, legal obligations or business practices change. The revised Terms will be posted on this page with an updated date.
If a material change significantly affects existing users, we will provide additional notice where reasonably practical. Continued use after updated Terms become effective constitutes acceptance of the revised Terms.
21. General provisions
If any provision of these Terms is found unenforceable, the remaining provisions will continue in effect. A failure to enforce a provision is not a waiver. You may not transfer these Terms without our written consent. We may transfer these Terms as part of a reorganization, merger, acquisition or transfer of the SecretUndo service.
22. Contact
Questions about these Terms may be sent to:
StoryTimeAndConfessions
India
Email: [email protected]
Related pages:
Follow Us On Social Media: