Legal

Terms of Service

The rules for using NullFlare. The short version: keep your key to yourself, pay for what you use, and never use the service to break into accounts or systems that are not yours.

Effective 27 September 2026. These terms are an agreement between you and Byte Ashen, who operates NullFlare (“we”, “us”). By using the API, holding an API key, or installing the Chrome extension, you accept them. If you use NullFlare for an organisation, you accept them on its behalf.

The service

NullFlare provides an API that solves Cloudflare Turnstile widgets and WAFv3 challenges and returns the result, and a free Chrome extension that clicks Turnstile checkboxes in your own browser. You must be at least 18, or the age of majority where you live, to use the API.

API keys

• Keep your key secret. Use it from your own servers, never in browser code or a public repository. Everything done with your key is your responsibility.
• One customer per key. You may use the API inside your own software and services. You may not sell, rent, or share your key, or resell raw access to the API, without our written permission.
• Tell us about leaks. If you think your key has been exposed, email us and we will replace it. Credits used before you tell us are not refunded.

Credits and payment

• Price. Credits cost $0.40 per 1,000. A Turnstile token uses 1 credit; a WAFv3 clearance uses 2.
• You pay for results. Credits are used only when a solve returns a token or clearance. Failed, rejected, rate-limited and busy requests are not charged.
• No expiry. Credits stay on your key until you use them.
• No refunds. Purchases are final, except where the law requires otherwise.
• Price changes apply to credits bought after the change, never to credits you already hold.
• Limits. Each key has a simultaneous-solve limit, which we set and may change.

Acceptable use

You may not use NullFlare, directly or through anything you build on it, to:

• Break into accounts. Credential stuffing, password spraying, brute-forcing logins, cracking or taking over accounts, or testing stolen credentials.
• Get unauthorised access to any system, service or data you do not have permission to access.
• Commit fraud. Payment or card fraud, fake orders, promotion or referral abuse, or impersonating others.
• Attack sites or services. Denial-of-service, flooding, or overloading any site, including ours.
• Spread harm. Spam, phishing, malware, or harassment.
• Collect personal data unlawfully, or do anything else that is illegal where you or the target are.
• Abuse the service itself. Getting around your key's limits, sharing keys to avoid them, or interfering with other customers.

You are responsible for how you use what the service returns, including complying with the law and with any agreements you have with the sites you access.

Suspension

Keys used to crack or take over accounts are suspended immediately, without warning. The same applies to fraud, attacks, and anything else in Acceptable use that causes harm to others.

We may suspend or delete a key that breaks these terms, puts the service or other customers at risk, or is used unlawfully. Credits on a key suspended or deleted for breaking these terms are forfeited. Where we are legally required to, or it is needed to stop serious harm, we may report misuse and share what little we hold (described in the Privacy Policy) with the authorities.

If you think a suspension is a mistake, email us and we will review it.

Chrome extension

The extension is free. You may install it, run it, and view its source for your own personal use. You may not modify, redistribute, sublicense, or sell it, or build derivative works from it, without our written permission. The acceptable-use rules above apply to it as well.

Availability

We work to keep NullFlare fast and available, but we do not guarantee uptime or that every challenge can be solved. Cloudflare changes its challenges without notice, and solving may stop working for a site or for a while until we adapt. Because failed solves are not charged, an outage does not use your credits. We may change, add, or remove features, and will give reasonable notice before permanently shutting down the API.

Liability

NullFlare is provided “as is”, without warranties of any kind, including fitness for a particular purpose. To the extent the law allows, we are not liable for indirect or consequential losses, lost profits, or lost data, and our total liability for any claim is limited to what you paid us in the three months before it arose.

You agree to cover us against claims and costs that arise from your use of the service in breach of these terms or the law.

General

We may update these terms. The current version is always on this page with its effective date; continuing to use NullFlare after a change means you accept it. If part of these terms is found unenforceable, the rest still applies. These terms and the Privacy Policy are the whole agreement between us about NullFlare.

Questions: [email protected] or Discord.