Terms of Service
TweetFeed
Terms of Service
TweetFeed
1. Acceptance
By accessing or using tweetfeed.live, including its website, public API (api.tweetfeed.live), data feeds (CSV, JSON, RSS, MISP), and any related content (collectively, the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree, do not use the Service. These Terms also apply if you only read, download, or redistribute data from the Service without further interaction.
2. The Service
TweetFeed aggregates indicators of compromise (URLs, domains, IP addresses, file hashes, and Twitter/X handles) that are shared publicly on Twitter/X by security researchers and the infosec community. The collected IOCs are republished as free, open feeds for threat hunting, detection engineering, and security research. The Service is provided free of charge, without authentication, for any lawful purpose.
3. Nature of the data - COMMUNITY-SOURCED, NOT VERIFIED
The data distributed by TweetFeed is sourced from public tweets posted by third parties. TweetFeed does not scan, execute, or independently verify any IOC, and does not confirm that any listed URL, domain, IP, hash, or account is malicious. The data reflects what the community posted, nothing more. False positives and false negatives occur routinely. Anyone relying on the data must perform their own verification before taking action. Inclusion in the Service does not constitute an accusation against any party.
4. Acceptable use
You may use the Service and its data for any lawful purpose. You may NOT:
5. Rate limiting and availability
The public API (api.tweetfeed.live) is served by a Cloudflare Worker on the free plan, which is subject to Cloudflare's standard Worker quotas (approximately 100,000 requests per day at the time of writing). Excessive or abusive traffic may be throttled, cached, or blocked without notice. The Service may be modified, suspended, or discontinued at any time, with or without notice. No uptime or availability commitment is made.
6. Takedown and correction requests
If you believe a specific IOC published by TweetFeed is incorrect, outdated, or should not be listed, reach out on X via DM to @0xDanielLopez or post on the Featurebase feedback board with the specific entry and your reasoning. Requests are reviewed on a best-effort basis. TweetFeed retains sole discretion over what is published, in line with its editorial judgement and security research purposes. Because IOCs are sourced from public tweets, the original tweet author retains control over the underlying post.
7. Data license
The data distributed through TweetFeed (CSV, JSON, RSS, MISP feeds, and API responses at api.tweetfeed.live) is released into the public domain under Creative Commons CC0 1.0. When redistributing or publishing the data, attribution to TweetFeed is appreciated but not required. The website design, source code, trademarks, and branding remain reserved and are not covered by this license.
8. No warranties
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. TWEETFEED DISCLAIMS ALL WARRANTIES INCLUDING ACCURACY, COMPLETENESS, RELIABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND MERCHANTABILITY. TWEETFEED DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE.
9. Limitation of liability
To the maximum extent permitted by law, TweetFeed and its operator shall not be liable for any direct, indirect, incidental, consequential, special, exemplary, or punitive damages arising from or related to your use of, reliance on, or inability to use the Service, including but not limited to loss of data, loss of profits, business interruption, or reputational harm - even if advised of the possibility of such damages.
10. Indemnification
You agree to defend, indemnify, and hold harmless TweetFeed and its operator from any claim, loss, liability, expense, or damage (including reasonable legal fees) arising from your use of the Service, your violation of these Terms, or your violation of any law or third-party right.
11. Third-party links and content
The Service contains references and links to third-party URLs, domains, and IP addresses that may be malicious, compromised, or otherwise unsafe. Those resources are not controlled by TweetFeed. Visiting them may expose you to credential theft, malware, or other risks. TweetFeed also links to the original Twitter/X posts from which IOCs were extracted; those posts remain subject to Twitter/X's own terms and may be edited or removed by their authors at any time. TweetFeed assumes no responsibility for third-party content, privacy practices, or security. You access those links entirely at your own risk.
12. Privacy and personal data
TweetFeed is operated from Spain and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and Spanish LOPDGDD. Data controller: Daniel López. Contact: X DM to @0xDanielLopez or the Featurebase feedback board.
Data processed:
No personal data is sold, rented, or disclosed beyond the subprocessors listed in §13.
Your GDPR rights: access, rectification, erasure, restriction, portability, and the right to object to processing based on legitimate interest. To exercise them, send an X DM to @0xDanielLopez or post on the Featurebase feedback board. You may also lodge a complaint with the Spanish Data Protection Authority (AEPD).
13. Third-party services (subprocessors)
The Service relies on the following third parties, each governed by its own terms and privacy policy:
The IOC pipeline ingests data only from public Twitter/X posts. No personal data about tweetfeed.live visitors is transmitted to Twitter/X or to any of the subprocessors beyond what is strictly necessary to serve the request or render the page.
14. Minors
The Service is not directed at individuals under the age of 16. If you are under 16, do not use the Service or submit any personal data to it.
15. Changes to these Terms
TweetFeed may revise these Terms at any time. The "Last updated" date at the bottom reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the revised Terms.
16. Governing law and jurisdiction
These Terms are governed by and construed in accordance with the laws of Spain, without regard to conflict-of-law principles. Any dispute arising out of or related to the Service shall be subject to the exclusive jurisdiction of the competent courts of Spain. If you use the Service from outside Spain, you do so on your own initiative and are responsible for complying with local laws.
17. Severability
If any provision of these Terms is found unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that the remaining Terms remain in full force and effect.
18. Operator
The Service is operated by Daniel López as an independent side project.
By accessing or using tweetfeed.live, including its website, public API (api.tweetfeed.live), data feeds (CSV, JSON, RSS, MISP), and any related content (collectively, the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree, do not use the Service. These Terms also apply if you only read, download, or redistribute data from the Service without further interaction.
2. The Service
TweetFeed aggregates indicators of compromise (URLs, domains, IP addresses, file hashes, and Twitter/X handles) that are shared publicly on Twitter/X by security researchers and the infosec community. The collected IOCs are republished as free, open feeds for threat hunting, detection engineering, and security research. The Service is provided free of charge, without authentication, for any lawful purpose.
3. Nature of the data - COMMUNITY-SOURCED, NOT VERIFIED
The data distributed by TweetFeed is sourced from public tweets posted by third parties. TweetFeed does not scan, execute, or independently verify any IOC, and does not confirm that any listed URL, domain, IP, hash, or account is malicious. The data reflects what the community posted, nothing more. False positives and false negatives occur routinely. Anyone relying on the data must perform their own verification before taking action. Inclusion in the Service does not constitute an accusation against any party.
4. Acceptable use
You may use the Service and its data for any lawful purpose. You may NOT:
- Use the data to facilitate, promote, or carry out phishing, fraud, harassment, malware distribution, or any illegal activity;
- Attempt to disrupt, overload, reverse-engineer, or otherwise interfere with the Service infrastructure;
- Circumvent or try to circumvent any rate limit, access control, or security mechanism;
- Misrepresent the source of the data or publicly assert that a listed IOC is confirmed malicious based solely on its presence in TweetFeed;
- Use the Service in any way that violates applicable law or third-party rights.
5. Rate limiting and availability
The public API (api.tweetfeed.live) is served by a Cloudflare Worker on the free plan, which is subject to Cloudflare's standard Worker quotas (approximately 100,000 requests per day at the time of writing). Excessive or abusive traffic may be throttled, cached, or blocked without notice. The Service may be modified, suspended, or discontinued at any time, with or without notice. No uptime or availability commitment is made.
6. Takedown and correction requests
If you believe a specific IOC published by TweetFeed is incorrect, outdated, or should not be listed, reach out on X via DM to @0xDanielLopez or post on the Featurebase feedback board with the specific entry and your reasoning. Requests are reviewed on a best-effort basis. TweetFeed retains sole discretion over what is published, in line with its editorial judgement and security research purposes. Because IOCs are sourced from public tweets, the original tweet author retains control over the underlying post.
7. Data license
The data distributed through TweetFeed (CSV, JSON, RSS, MISP feeds, and API responses at api.tweetfeed.live) is released into the public domain under Creative Commons CC0 1.0. When redistributing or publishing the data, attribution to TweetFeed is appreciated but not required. The website design, source code, trademarks, and branding remain reserved and are not covered by this license.
8. No warranties
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. TWEETFEED DISCLAIMS ALL WARRANTIES INCLUDING ACCURACY, COMPLETENESS, RELIABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND MERCHANTABILITY. TWEETFEED DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE.
9. Limitation of liability
To the maximum extent permitted by law, TweetFeed and its operator shall not be liable for any direct, indirect, incidental, consequential, special, exemplary, or punitive damages arising from or related to your use of, reliance on, or inability to use the Service, including but not limited to loss of data, loss of profits, business interruption, or reputational harm - even if advised of the possibility of such damages.
10. Indemnification
You agree to defend, indemnify, and hold harmless TweetFeed and its operator from any claim, loss, liability, expense, or damage (including reasonable legal fees) arising from your use of the Service, your violation of these Terms, or your violation of any law or third-party right.
11. Third-party links and content
The Service contains references and links to third-party URLs, domains, and IP addresses that may be malicious, compromised, or otherwise unsafe. Those resources are not controlled by TweetFeed. Visiting them may expose you to credential theft, malware, or other risks. TweetFeed also links to the original Twitter/X posts from which IOCs were extracted; those posts remain subject to Twitter/X's own terms and may be edited or removed by their authors at any time. TweetFeed assumes no responsibility for third-party content, privacy practices, or security. You access those links entirely at your own risk.
12. Privacy and personal data
TweetFeed is operated from Spain and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and Spanish LOPDGDD. Data controller: Daniel López. Contact: X DM to @0xDanielLopez or the Featurebase feedback board.
Data processed:
- IP address, User-Agent, request path, referer - recorded in edge/server access logs for abuse prevention, troubleshooting, and rate limiting. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: short-lived, typically 30 days or less at the CDN/host level.
- Aggregate traffic analytics - collected via Umami, a cookieless analytics tool. No cookies, no localStorage, and no fingerprinting are used. IP addresses are hashed with a daily-rotating salt and never stored. Only aggregate page views, referrers, and coarse device/country information are retained. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Feedback content - only if you post on the Featurebase feedback board or send an X DM to @0xDanielLopez. Used solely for correspondence about TweetFeed.
- Public Twitter/X content - the Service ingests publicly available tweets and extracts IOCs from them. It does not process private messages, protected accounts, or any non-public content. The author handle of a tweet is retained alongside its IOC strictly as provenance metadata.
No personal data is sold, rented, or disclosed beyond the subprocessors listed in §13.
Your GDPR rights: access, rectification, erasure, restriction, portability, and the right to object to processing based on legitimate interest. To exercise them, send an X DM to @0xDanielLopez or post on the Featurebase feedback board. You may also lodge a complaint with the Spanish Data Protection Authority (AEPD).
13. Third-party services (subprocessors)
The Service relies on the following third parties, each governed by its own terms and privacy policy:
- Cloudflare, Inc. - DNS, CDN, DDoS protection, and the Cloudflare Worker that powers api.tweetfeed.live. Processes all incoming HTTP requests to the Service.
- GitHub, Inc. - hosts the static frontend at tweetfeed.live via GitHub Pages, and hosts the public data repository from which feeds are served.
- Umami Software, Inc. - cookieless web analytics (cloud.umami.is). Receives page URL, referrer, and hashed visitor signal; does not set cookies or store IP addresses.
- Featurebase (Useful Ltd.) - hosts the public feedback board at tweetfeed.featurebase.app. Collects email and post content when you interact with the board.
- Google LLC - Google Fonts used for typography on the website.
- Public CDN providers - jsDelivr, Cloudflare CDN, and similar services deliver common JavaScript and CSS libraries (jQuery, Bootstrap, DataTables, FontAwesome).
The IOC pipeline ingests data only from public Twitter/X posts. No personal data about tweetfeed.live visitors is transmitted to Twitter/X or to any of the subprocessors beyond what is strictly necessary to serve the request or render the page.
14. Minors
The Service is not directed at individuals under the age of 16. If you are under 16, do not use the Service or submit any personal data to it.
15. Changes to these Terms
TweetFeed may revise these Terms at any time. The "Last updated" date at the bottom reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the revised Terms.
16. Governing law and jurisdiction
These Terms are governed by and construed in accordance with the laws of Spain, without regard to conflict-of-law principles. Any dispute arising out of or related to the Service shall be subject to the exclusive jurisdiction of the competent courts of Spain. If you use the Service from outside Spain, you do so on your own initiative and are responsible for complying with local laws.
17. Severability
If any provision of these Terms is found unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that the remaining Terms remain in full force and effect.
18. Operator
The Service is operated by Daniel López as an independent side project.
Last updated: 11 April 2026