Why this policy exists
This policy lists what you may not do with a CTAurl link or QR code, and what we do when someone does it. It exists because a short link asks people to trust a tap before they see where it goes, and a readable action domain asks for more trust: buy should mean buy.
What is not allowed
- Phishing, collecting passwords or payment details by deception, and impersonating a person, brand or public body.
- Malware, unwanted software, and downloads that start without the visitor choosing them.
- Scams and fraud, including fake shops, fake investment offers and fake giveaways.
- Spam: sending links in bulk to people who did not ask for them, in breach of Hong Kong's Unsolicited Electronic Messages Ordinance or similar laws elsewhere.
- Misleading action domains: a buy link must lead to something you can buy, a book link to a way to book, a read link to something to read, a sign-up link to a sign-up, a learn-more link to something that explains, and a try link to something you can try.
- Redirect chains or cloaking built to hide the real destination from visitors or from our checks.
- Content that is illegal in Hong Kong or where it is aimed, including child sexual abuse material, which we report to the authorities.
- Harassment, threats, and sharing someone's personal data without consent.
- Infringing someone else's copyright or trade mark.
- Abusing the service: scraping, overloading it, getting around limits or bans, or creating accounts in bulk.
How we find problems
We review reports from the public and look at unusual patterns. We check new destinations for a valid format and block them if they point at private or internal network addresses. We do not yet check destinations against third-party lists of unsafe sites; until we do, public reports matter.
What we may do
- Ask you to fix a link.
- Disable a link or pause a QR code, so it no longer reaches the destination.
- Suspend or close an account, especially for phishing, malware or repeated breaches.
- Keep relevant records and report to the police or other authorities where the law requires it.
For urgent harm we act first and tell you afterwards. Otherwise we tell you first where we can.
Reporting a link
Anyone can report a CTAurl link, without an account. See Report abuse.
Appeals
If we disabled your link or suspended your account and you think we got it wrong, write to support@ctaurl.com with the link and any context. A person reviews every appeal and replies with a decision and the reason.