Terms of Use for maca Sec

Document version: 2026-07-06
Last updated: 2026-07-06
Publisher: maca Development
Website: https://maca.se/
Plugin: maca Sec (WordPress plugin)

1. General

These terms of use (the ”Terms”) govern your use of the WordPress plugin maca Sec (the ”Plugin”), provided by maca Development (”we”, ”us”, ”the Publisher”).

By downloading, installing, activating, or using the Plugin, you accept the Terms. If you do not accept the Terms, you must not use the Plugin.

The Plugin is distributed under the license GNU General Public License version 2.0 or later (”GPL”). In the event of a conflict between the GPL and these Terms, the GPL applies to the part of the Plugin covered by the license. These Terms supplement the GPL with liability and warranty provisions that apply to your use of the Plugin to the extent permitted by law.

2. What the Plugin is — and is not

maca Sec is a tool for reducing the risk of common security issues in WordPress, for example through a firewall, login protection, hardening, scanning, and logging.

The Plugin is not:

a guarantee that your website is or remains secure
a substitute for professional security advice, penetration testing, or incident response
an insurance policy against data loss, intrusion, downtime, or financial damage
a promise that all attacks, vulnerabilities, or abuse will be detected or stopped

Security is a process. Threats, attack methods, and software environments change continuously. No security plugin can provide complete protection.

3. No warranty (”as is”)

The Plugin is provided ”as is” and ”as available”, without express or implied warranties of any kind, to the extent permitted by law.

The Publisher expressly disclaims warranties of:

fitness for a particular purpose
the Plugin being error-free or uninterrupted
the Plugin protecting against all known or unknown threats
configuration, scanning, or logging being complete or correct in all situations
compatibility with all themes, plugins, hosting environments, or server configurations

4. Your responsibilities as a website owner

You are solely responsible for:

Configuration — ensuring the Plugin settings are suitable for your website and business
Testing — verifying that protections do not block legitimate visitors, customers, or administrators
Backups — regular backups of files and database
Updates — WordPress, PHP, themes, plugins, and maca Sec
Access control — strong passwords, 2FA, and limited administrator access
Lawful use — ensuring that features such as IP blocking, country blocking, and logging are used in accordance with applicable law, including the GDPR and other data protection laws
Controller responsibility — as a rule, you are the data controller for information collected about visitors to your website through the Plugin (see Privacy Policy)
Third-party services — separate agreements and API keys for services you enable (e.g. Google reCAPTCHA, Cloudflare Turnstile, WPScan)

You should not rely solely on maca Sec as your only security measure.

5. Known limitations

You acknowledge that the Plugin may:

miss attacks (false negatives) — new or sophisticated attacks may not be blocked
block legitimate users (false positives) — for example with strict firewall rules, country blocking, or shared threat intelligence
affect performance — especially under high traffic or extensive scanning
conflict with other plugins — especially other security or firewall plugins
require external services — some features only work if the server can reach external APIs or if you have configured third-party services

The Publisher is not responsible for damages arising from such limitations.

6. Limitation of liability

To the extent permitted by law, the Publisher is not liable for:

indirect or consequential damages
lost profits, lost revenue, or lost business opportunities
data loss or corruption
downtime or business interruption
damage caused by intrusion, malware, ransomware, or unauthorized access
damage caused by incorrect configuration, failure to update, or lack of backups
damage caused by third-party services, hosting, networks, or force majeure

If the Publisher despite the above is found liable under mandatory law, the total liability is limited to zero kronor, since the Plugin is provided free of charge. If a court finds that such a limitation is not valid, liability shall instead be limited to the maximum amount expressly permitted by law for free software.

Nothing in the Terms excludes or limits liability that may not be excluded under mandatory Swedish law (for example in cases of intent or gross negligence to the extent such liability may not be limited).

7. Third-party services and integrations

The Plugin may interact with third-party services, for example:

Service	Purpose
ip-api.com	Country code lookup for IP addresses
Google reCAPTCHA	Captcha for login
Cloudflare Turnstile	Captcha for login
WPScan API	CVE scanning of plugins and themes
api.maca.se	Anonymized telemetry (activation, deactivation, etc.)
maca Hub	Optional remote control and status reporting

Use of such services is governed by the respective third party’s terms and privacy policy. The Publisher is not responsible for the availability, accuracy, or processing of data by third-party services.

8. maca Hub and remote actions

If you enable integration with maca Hub or allow remote actions (e.g. scanning or login via app), you do so at your own risk. Make sure that only trusted devices and accounts have access.

The Publisher is not responsible for unauthorized use of remote functions resulting from compromised keys, weak passwords, or incorrect configuration.

9. Scanning and ”approvals”

The security scanner and file monitoring provide recommendations, not legal or technical guarantees. If you approve a scan finding or a file change, you do so at your own risk.

The Publisher is not responsible for damages arising if you approve suspicious code, incorrect configurations, or known vulnerabilities.

10. Support and updates

The Publisher may, but is not obligated to, provide updates, support, or documentation. Features may be added, changed, or removed over time.

11. Intellectual property

The Plugin’s source code is covered by the GPL. The trademark maca Sec and associated graphics belong to the Publisher or its licensors. You may not use the trademark in a way that implies an official partnership without written consent.

12. Changes to the Terms

The Publisher may update the Terms. The latest version is published on maca.se with the stated date. Continued use after a change means that you accept the updated Terms, unless otherwise required by mandatory law.

13. Governing law and disputes

The Terms shall be interpreted in accordance with Swedish law. Disputes shall first be resolved through negotiation. If the parties do not agree, the dispute shall be settled by a Swedish general court, with Malmö District Court as the court of first instance, unless otherwise required by mandatory consumer protection rules.

14. Contact

maca Development
Website: https://maca.se/
Email: contact via the website

maca Sec – Terms