Abuse reports

Last updated 2026-09-08.

Reporting abuse

Email [email protected]. It reaches a person, not a queue. We do not require a formal notice or a lawyer to act — tell us what you are seeing and we will look at it, usually within one business day.

For a trademark or content concern about a logo we are serving, the takedown page is the faster route: it says exactly what we need and what happens next.

Email from favi.sh

favi sends five kinds of message, all of them to the owner of the account concerned: a sign-in link, an email verification, a password reset, and two notices when an account's own API usage reaches 80% and 100% of its monthly limit. There is no marketing mail, no newsletter, and no mechanism in the application to send one.

If you received mail from favi.sh that you did not expect, someone may have typed your address into our sign-in form. Nothing happens without the link, and the link expires in ten minutes — but tell us at [email protected] and we will suppress the address so it stops. Marking the message as spam does the same thing automatically: complaints and hard bounces both stop mail to an address for good.

Our crawler, if you run a website

favi fetches the icons a website publishes for browsers to display — the favicon, the touch icon, the images a page declares as its logo — from that website, and serves them back as images. It reads the homepage to find them and nothing else: no private pages, no forms, no personal data. A domain is visited a handful of times at most, then left alone for about 60 days.

It identifies itself as favi.sh/1.0 with a link to this page and a contact address. It does not read robots.txt, because icons are published precisely for user agents to fetch and we request nothing beyond them. Where a bot wall refuses that identity outright, it retries once presenting itself as a browser, still only for the declared icon files.

If you would rather we did not fetch from your domain at all, say so at [email protected] and we will add it to the block list. Requests for it then return a generated letter mark, and the crawler never visits again.