# Terms of Use for maca Sec

**Document version:** 2026-07-06-2  
**Last updated:** 2026-07-06  
**Publisher:** maca Development  
**Website:** [https://maca.se/](https://maca.se/)  
**Plugin:** maca Sec (WordPress plugin)

---

## 1. General

These Terms of Use ("Terms") govern your use of the WordPress plugin **maca Sec** ("the Plugin"), provided by maca Development ("we", "us", "the Publisher").

By downloading, installing, activating, or using the Plugin, you agree to these Terms. If you do not accept the Terms, you must not use the Plugin.

The Plugin is distributed under the **GNU General Public License version 2.0 or later** ("GPL"). In the event of a conflict between the GPL and these Terms, the GPL applies to the portion of the Plugin covered by that license. These Terms supplement the GPL with liability and warranty provisions that apply to your use of the Plugin to the extent permitted by law.

---

## 2. What the Plugin is — and is not

maca Sec is a tool for **reducing the risk** of common security issues in WordPress, for example through a firewall, login protection, hardening, scanning, and logging.

The Plugin is **not**:

- a guarantee that your website is or will remain secure
- a substitute for professional security advice, penetration testing, or incident response
- insurance against data loss, breaches, downtime, or financial damage
- a promise that all attacks, vulnerabilities, or abuse will be detected or stopped

Security is a process. Threats, attack methods, and software environments change continuously. No security plugin can provide complete protection.

---

## 3. No warranty ("as is")

The Plugin is provided **"as is"** and **"as available"**, without express or implied warranties of any kind, to the extent permitted by law.

The Publisher specifically disclaims warranties regarding:

- fitness for a particular purpose
- that the Plugin is error-free or uninterrupted
- that the Plugin protects against all known or unknown threats
- that configuration, scanning, or logging is complete or accurate in all situations
- compatibility with all themes, plugins, hosting environments, or server configurations

---

## 4. Your responsibility as a website owner

You are solely responsible for:

- **Configuration** — ensuring the Plugin's settings are appropriate for your website and operations
- **Testing** — verifying that protection does not block legitimate visitors, customers, or administrators
- **Backups** — regular backups of files and database
- **Updates** — WordPress, PHP, themes, plugins, and maca Sec
- **Access control** — strong passwords, 2FA, and limited administrator access
- **Lawful use** — using features such as IP blocking, country blocking, and logging in compliance with applicable law, including GDPR and other data protection legislation
- **Data controller obligations** — as a rule, you are the data controller for data collected about visitors to your website via the Plugin (see [Privacy Policy](https://maca.se/maca-sec-integritet))
- **Third-party services** — your own agreements and API keys for services you enable (e.g. Google reCAPTCHA, Cloudflare Turnstile, WPScan)

You must not rely solely on maca Sec as your only security measure.

---

## 5. Known limitations

You accept that the Plugin may:

- **miss attacks** (false negatives) — new or sophisticated attacks may not be blocked
- **block legitimate users** (false positives) — for example under strict firewall rules, country blocking, or collective threat intelligence
- **affect performance** — especially under high traffic or extensive scanning
- **conflict with other plugins** — particularly other security or firewall plugins
- **require external services** — certain features work only if the server can reach external APIs or if you have configured third-party services

The Publisher is not liable for damage arising from such limitations.

---

## 6. Limitation of liability

To the extent permitted by law, the Publisher is **not** liable for:

- indirect or consequential damage
- lost profits, lost revenue, or lost business opportunities
- data loss or corruption
- downtime or business interruption
- damage caused by breaches, malware, ransomware, or unauthorized access
- damage caused by incorrect configuration, failure to update, or inadequate backups
- damage caused by third-party services, hosting, networks, or force majeure

If the Publisher is nevertheless deemed liable under mandatory law despite the above, total liability is limited to **zero kronor**, because the Plugin is provided free of charge. If a court finds such a limitation invalid, liability shall instead be limited to the maximum amount expressly permitted by law for free software.

Nothing in these Terms excludes or limits liability that may not be excluded under mandatory Swedish law (e.g. in cases of intent or gross negligence to the extent such liability may not be limited).

---

## 7. Third-party services and integrations

The Plugin may interact with third-party services, for example:

| Service | Purpose |
|--------|--------|
| ip-api.com | Country code lookup for IP addresses |
| Google reCAPTCHA | Captcha on login |
| Cloudflare Turnstile | Captcha on login |
| WPScan API | CVE scanning of plugins and themes |
| api.maca.se | Anonymized telemetry (activation, deactivation, etc.) |
| maca Hub | Optional remote management and status reporting |

Use of such services is governed by each third party's terms and privacy policy. The Publisher is not responsible for third-party services' availability, accuracy, or processing of data.

---

## 8. maca Hub and remote actions

If you enable integration with **maca Hub** or allow remote actions (e.g. scanning or login via app), you do so at your own risk. Ensure that only trusted devices and accounts have access.

The Publisher is not liable for unauthorized use of remote features resulting from compromised keys, weak passwords, or incorrect configuration.

---

## 9. Scanning and "approvals"

The security scanner and file monitoring provide **recommendations**, not legal or technical guarantees. If you approve a scan finding or a file change, you do so at your own risk.

The Publisher is not liable for damage arising if you approve suspicious code, incorrect configurations, or known vulnerabilities.

---

## 10. Support and updates

The Publisher may, but is not obliged to, provide updates, support, or documentation. Features may be added, changed, or removed over time.

---

## 11. Intellectual property rights

The Plugin's source code is covered by the GPL. The **maca Sec** trademark and associated graphics belong to the Publisher or its licensors. You may not use the trademark in a way that implies an official partnership without written consent.

---

## 12. Changes to the Terms

The Publisher may update these Terms. The latest version is published at [maca.se/maca-sec-villkor](https://maca.se/maca-sec-villkor) with the stated date. Continued use after a change means you accept the updated Terms, unless otherwise required by mandatory law.

---

## 13. Applicable law and disputes

These Terms shall be interpreted under **Swedish law**. Disputes shall first be resolved through negotiation. If the parties do not reach agreement, the dispute shall be decided by a Swedish court of general jurisdiction, with **Malmö District Court** as the court of first instance, unless otherwise required by mandatory consumer rules.

---

## 14. Contact

**maca Development**  
Website: [https://maca.se/](https://maca.se/)  
Email: contact via the website

---

## Related documents

- [Privacy Policy for maca Sec](https://maca.se/maca-sec-integritet)
- [User Guide](anvandarguide.en.md)
- [GPL-2.0](https://www.gnu.org/licenses/gpl-2.0.html)
