Acceptable Use Policy

This policy applies to everyone who uses CarSpark — drivers paying for parking, and hosts running a car park on the platform. It exists mainly to protect drivers from scams that impersonate real parking signs ("quishing" — fake QR codes), and to keep the platform fair and safe for everyone.

Prohibited uses

• Fraud and impersonation — creating, hosting, or directing anyone to a CarSpark-branded page or QR code that does not correspond to a genuine, currently-operating CarSpark site.
• Scraping or enumeration — attempting to systematically access, scrape, or enumerate driver-facing pages, proof-of-payment links, or session data beyond your own legitimate use. Proof-of-payment links use unguessable tokens specifically so that only the driver who holds the link (and, via the warden view, the host) can see it — attempting to guess or iterate these tokens is prohibited.
• Warden-token misuse — sharing a warden-view link with anyone outside the purpose the host issued it for, or using warden-view data to issue parking charges, fines, or take enforcement action without the accreditation required to do so lawfully.
• Sign tampering — altering, defacing, overlaying, or replacing a genuine CarSpark QR sign with a fraudulent one, or knowingly directing drivers to a tampered sign.
• Any other unlawful use of the platform, including attempts to circumvent rate limits or security controls, or to interfere with the normal operation of the service for other users.

Host signage-integrity duties

Hosts must keep their physical QR signage in good condition, check periodically that it has not been tampered with or overlaid with a fraudulent code, and report any tampering they discover to CarSpark promptly. A host's failure to maintain sign integrity that leads to driver harm is a serious breach of our Host Terms.

Reporting

If you scan a code that looks tampered with, damaged, or otherwise suspicious, use the "Report a suspicious code" link on the driver page instead of paying. You can also email us directly at [email protected].

Consequences

We may suspend or terminate access to CarSpark, immediately and without notice where necessary, for anyone who breaches this policy — including suspending a host's account while we investigate suspected fraud or quishing activity connected to their site, and reporting suspected criminal activity to the relevant authorities and to Stripe.