FAQ

Here, you can learn more about our refund process and how to track the status of your request.   What happens after I have requested a refund?   Review

Once you've submitted a refund request, the author will review it and may contact you for more information, or try and resolve your issue.

Approve

If your request is approved, we’ll let you know. Your request will then be sent to our Help Team to be processed. Remember, once your refund has been processed, your right to use, download and rate the item is revoked.

-If you have purchased more than one license for the same item, the rating will be removed only when the last remaining license has been refunded.

Decline

If the author declines your request, we'll let you know that it is now closed. If you disagree with the decision, now will be the time to raise a dispute with us.

  How long will it take for my refund request to be processed?

If your refund request is sent to an author you should expect to receive a response within five days. If this doesn't happen, you can "raise a dispute", which means you ask our Help Team to look into it.

If your refund request is approved by the author, it is sent to the Envato Help Team for processing. This usually takes three to five business days.

How do I track the status of my refund request?

If your request was sent to the author, you will receive a confirmation email with a tracking link.

You must keep this link as you may need it to raise a dispute.

The tracking link gives you access to the refund request, where you can:

• Monitor the progress of your refund request,
• Communicate privately with the author (meaning that this conversation will be visible to you, the author and Envato only),
• Raise a dispute.

What if I need help?

If you would like to raise a dispute and ask us to investigate your refund request then please follow the steps listed below:

1. Follow the tracking link you have received in a refund request confirmation email. It will take you to your refund form where you will see a 'raise a dispute' hyperlink.

2. Once you click on 'raise a dispute' hyperlink, you will be able to provide the information required to proceed with your dispute.

3. Please provide a clear and detailed description of the problem. You can also attach any supporting screenshots. Note: Images must be .png or .jpeg and must not be more than 10MB in total.

4. Click 'Raise Dispute' button to complete the action.

5. We will review your dispute within 5 business days.

You might want to raise a dispute if:

• Your request is valid according to our Refund Rules, but the author has declined anyway,
• You haven't received a response from the author within five days.

Once we receive your request we will:

• Investigate all disputes,
• Re-open a refund that was previously closed, if necessary,
• Ask both you and/or the author for more information, in order to get a better idea of what's going on,
• Review all the information,
• If your dispute relates to item support, try and contact the author to request support. For more information see our Item Support guidelines.

What role does Envato play?

We strongly recommend you contact the author as soon as you have an issue with your item.

When handling refund requests for items purchased on ThemeForest and CodeCanyon the typical enquiries we receive are:

• Problems with making payments and completing purchases.

Types of enquiries authors may receive are:

• The item is broken, malfunctioning or not as described,
• Problems with item support.

Ratings and fair use guidelines

Our refund rules are here to help you make the most out of your purchase! And, goes without saying, we expect our community to be fair and always follow our guidelines.

Here are the links to our policies:

• Item Support Policy
• Envato Market Terms
• Ratings Policy
• Envato Market Refund Rules

Can I withdraw my refund request?

You sure can! Head over to your refund request by clicking on the link which was provided to you in your email and provide a comment to the author advising them you wish to withdraw your request.The author will then decline your request.

How do I request a refund?

If you have encountered an issue with your item, you may wish to request a refund. If your request meets our Envato Market Refund Rules, you can request a refund by following the guide available in ‘Can I get a refund?’.

  Was this article helpful? Yes No 2 out of 4 found this helpful

Still no luck? We can help!

Get in touch with our friendly support team.

Submit a request

Welcome to iconicKODES’s Acceptable Use Policy

1. Welcome to our acceptable user policy. This policy sets out what you can and cannot use our sites and products for.

2. When we say ’we’, ’us’, or ’iconicKODES’ it’s because that’s who we are and we own and run the iconicKODES Marketplace and other iconicKODES products. If we say ’policy’ we’re talking about this acceptable user policy. If we say ’user terms’ we’re talking about the rules for using any of the iconicKODES products and services. Take the time to read this policy because it forms a part of the user terms for each of the iconicKODES products. By using any of our sites, you agree to this policy. If you do not agree to this policy we won’t take it personally, but please do not use iconicKODES.

So what’s not acceptable use?

3. It’s NOT OKAY to use iconicKODES or any of our sites, services, or products to submit, post, build, host, or otherwise make available any content that may contain, provide access to (eg, through links to third-party websites) or promote any of the following content:

1. Adult content: This includes images or videos that contain nudity or sexual activity, or any commercial activity linked to making money from adult content such as escort agencies.
2. Exploitation of children: This includes images or videos depicting children in a way that encourages or promotes attraction towards children.
3. Hate speech: This includes content that supports or condones violence or discrimination against individuals based on race, ethnicity, religion, disability, age, gender, nationality, sexual orientation, or gender identity.
4. Incitement of violence: This includes content that threatens, or that is intended to incite, violence against an individual or group of individuals.
5. Harassment: This includes any form of harassment or bullying against an individual or group of individuals.
6. Defamation: This includes any untruthful comments about a person that tends to lower their estimation in the eyes of others.
7. Copyright and third-party intellectual property: Using the iconicKODES sites, products, or services in violation of the copyright or other intellectual property rights of others is NOT cool, and is illegal, so please don’t do that. For more information about how to report intellectual property infringement please see the iconicKODES Marketplace Intellectual Property Policy.
8. Offensive content: This includes content that would cause offence to a reasonable person, including content that is posted for shock value.
9. Fraudulent, misleading or deceptive conduct: This includes making statements about your own products or services that are not accurate or impersonating others. You must also not use a false email address or misrepresent your affiliation with others. You must not use information gathered from or through the iconicKODES sites, service or products in a way that may confuse or mislead consumers (for example, automatically gathering information to set up a site that looks like one of our sites). You must also not use a false email address or misrepresent your affiliation with others.

4. It’s also NOT OKAY to use iconicKODES or any of our sites, services or products to submit, post, build, host or otherwise make available any content that may contain, provide access to (eg, through links to third party websites) or promote any of the following activities:

1. Supply of regulated goods and services: This includes the supply of weapons, gambling or adult escort services.
2. Illegal activities: This seems like a no brainer but using iconicKODES, products or services for any dangerous or illegal content or other purposes is NOT acceptable. You should always ensure you’re aware and comply with any applicable laws in Australia, USA or other jurisdictions you are located in or doing business in.
3. Illegal activities which cause harm to iconicKODES products or services or brand or others: Unacceptable content or links which might cause harm to the iconicKODES products or services or brand or others is definitely NOT OKAY with us. This includes pirated software, programs or archives that provide the functionality to gain unauthorised access to other systems or networks of any kind, Warez sites, files or web pages that contain viruses, trojans, malware or other applications designed to access a user’s equipment or information with illegal intentions and/or without the knowledge of the user. You must not modify, reproduce, display, publish, distribute, copy, transmit, perform, license, create derivative works from, transfer, or sell or re-sell any information, content, software, or item obtained from or through iconicKODES sites, services or products, other than in accordance with these terms or the license for the item.

5. iconicKODES is founded on the idea of community and like any functioning and healthy community, some things are not allowed and are NOT OKAY. It’s NOT OKAY to:

1. attempt to gain unauthorised access to computer systems or content through the iconicKODES sites, service or products
2. attempt to contact other members through the iconicKODES sites, services or use any information gained from the iconicKODES sites or services with the intention to make a private arrangement that would otherwise be made using the iconicKODES sites, services or products;
3. enter any arrangements that are not consistent with, or are intended to apply in addition to, these terms or the Author Terms;
4. use information gathered from or through the iconicKODES sites, service or products in a way that may confuse or mislead consumers (for example, automatically gathering information to set up a site that looks like one of our sites);
5. use or permit the use of any automatic device or program, or manual process to monitor, copy, or scrape iconicKODES's sites, pages or products or the content or data contained in them;
6. attempt to or actually interrupt, negatively impact or alter the iconicKODES sites, service or products operation in any way.

How can I report any abuse or offensive content?

6. Reporting abuse: Please report suspected policy violations to us using the ’Report Abuse’ by emailing us at report.abuse@iconicKODES.com.

What action might we take if we find a buyer or customer has used our sites, products or services in breach of this policy?

7. We will try and ensure fair outcomes for any content or use we deem as NOT acceptable. If you’re not sure whether your content or intended use of our services is acceptable then please contact us to discuss.

8. If you have breached this acceptable use policy then we may, in our absolute discretion and without notice:

1. request that you immediately remove the content which we view is NOT acceptable;
2. immediately suspend or terminate any accounts you have with any of the iconicKODES businesses;
3. immediately stop providing you with the services, including hosting your website;
4. in serious cases such as those involving the abuse of children, or other illegal activity, report you to the appropriate authorities.

How can you contact us?

9. If you have any questions about this policy, please contact us at Report Abuse in writing at Level 3 551 Swanston Street, Carlton, VIC 3053, Australia or report.abuse@iconicKODES.com.

10. We’re really glad you made it to the end of the acceptable use policy because knowing this stuff is the best way to understand how you can use iconicKODES's sites, products and services.

Version 1.2 - Effective date: June 2021.

What’s this policy all about?

At iconicKODES Marketplace, we respect our community and intellectual property, and we expect our users to do the same. This policy explains how we, as the service provider of the iconicKODES Marketplace platform, address allegations of intellectual property infringement against content uploaded to our platform by Authors, and how copyright owners and authorized parties can submit valid notices of intellectual property infringement regarding this content. As allegations of intellectual property infringement are made against the content in the Author’s items, this policy also explains how Authors can respond when a DMCA takedown notice has been issued against their items. This policy forms part of the iconicKODES Marketplace Terms.

What are your options if you think your content is being used without your permission?

1. Contact the Author directly
   

   Consider whether you wish to contact the Author (seller of the item) who you think might be breaching your intellectual property rights. There may be a misunderstanding that you and the Author might be able to sort out without resorting to the formal processes outlined below.

   How to contact the Author directly see this DMCA FAQ page.

2. Submit a DMCA takedown notice
   

   If you’re a copyright owner or have the authority to act on behalf of a copyright owner, then you may consider sending us a DMCA takedown notice requesting we take down content uploaded by an Author.

   How to submit a DMCA takedown notice (valid format and other information)

3. Submit a General IPR notice
   

   If you’re an IPR owner (other than copyright), including trademark owners, or have the authority to act on behalf of the IPR owner, then you may consider sending us a General IPR notice requesting we take down content uploaded by an Author.

   How to submit a General IPR notice (including the expected format of the notice)

Information for Authors sent a DMCA takedown notice

What to consider if you're an iconicKODES Marketplace Author and you have been sent a DMCA takedown notice (including sending a counter-notification)?

Information about iconicKODES’s role in this process

Authors upload their content directly to iconicKODES Marketplace, and iconicKODES provides the platform services.

iconicKODES’s role in the process as the service provider of the platform and others steps available to it.

How to Contact us

Our designated copyright agent to receive copyright claims is iconicKODES Pty Ltd and can be reached via iconicKODES Marketplace Help. Please address DMCA takedown notices and General IPR notices and communications to iconicKODES Pty Ltd. If you're unable to use this system you can always post to iconicKODES Copyright Agent, iconicKODES Pty Ltd at 15th Street - Downtown, Dammam, KSA, or email to copyright@iconickodes.com.

Please visit the DMCA FAQ page if you have any further questions.

The DMCA Process

Summary: If you believe your intellectual property rights have been infringed, this article will help you submit a DMCA Takedown Notice or a General IPR Notice to us, for the content to be removed from Envato’s sites.

If you are an author who has received a DMCA Takedown Notice and your item has been removed, this article will help you understand the options open to you and includes information on submitting a Counter-Notice.

How to submit a valid DMCA Takedown Notice
What to consider if you have received a DMCA Takedown Notice
        & How to submit a Counter Notice
How to submit a General IPR Notice
What to consider if you have received a General IPR Notice or another type of complaint
Template Notices

How to submit a valid DMCA Takedown Notice

If you believe someone is using your copyrighted content without permission, you can use the Digital Millennium Copyright Act (DMCA) process by sending us a DMCA takedown notice. As the service provider of the Envato platforms, we act promptly when we receive valid DMCA takedown notices.

Please make sure you understand what rights you are claiming before you submit a DMCA takedown notice because it is a serious legal document. Consider whether you need legal advice. It's really important not to make false claims as this could have serious legal consequences.

If the DMCA takedown notice is not in a valid format we will ask you to resubmit with the missing information.

For us to action a DMCA takedown notice, it must be in a valid format, which means it must include the information set out at points 1-5 below.

1. Explain the content of the Author’s item that you claim infringes your copyright, including a description and where we can find it the Author’s item - include the URL;
2. Explain your copyrighted content and let us know where we can see this published - include the URL;
3. Give us a detailed explanation about how you believe the content in the Author’s item violates your copyright;
4. Include your full name and contact details, including your address, phone number, and email address;
5. Include the following two statements:
   • • "I have a good faith belief that use of the copyrighted materials described above as allegedly infringing is not authorized by the copyright owner, its agent, or the law." AND
     • "I swear, under penalty of perjury, that the information in the notification is accurate and that I am the copyright owner or am authorized to act on behalf of the owner of an exclusive right that is allegedly infringed."
6. By law, you need to sign and date your DMCA take down notice either with a physical or digital signature. If you want to sign a physical document you'll need to scan the document and attach it to the help ticket.

We have to send this DMCA takedown notice to the other person, which means your details will be passed to them. The other person, who is the Author of the item you have identified, can submit a DMCA counter-notification if they disagree with your DMCA takedown notice, and they might contact you directly using your contact details.

The content in the Author’s item in question will generally be disabled from Envato when we receive a DMCA takedown notice. If we receive a counter-notification and you have not confirmed to us that you've filed court proceedings against the Author within 10 business days, we will re-enable the content within 14 business days of receiving the counter-notification. If you have any further questions please visit our DMCA FAQ page.

What to consider if you have received a DMCA Takedown Notice

If you receive a DMCA takedown notice, you can consider whether you think the claims made in the notice are valid. You might choose to seek legal advice, especially if you're not sure whether there is any legal validity to the claim.

• You can choose to accept a DMCA takedown notice - if so your content will remain disabled.
• Or, you can choose to respond to a DMCA takedown notice by sending us a DMCA counter-notification.

How to submit a Counter Notice

Please take care to understand this process because it is possible that the claimant can take legal action against you if you file a counter-notification. If you have any further questions please visit our DMCA FAQ page.

It's really important not to make a false claim, as this could have serious legal consequences. Please seek your own advice if you're not sure about what the counter-notification process means.

If the DMCA counter notification is not in a valid format we will ask you to resubmit with the missing information.

For us to action a DMCA counter notification it must be in a valid format, which means it must include the information set out in the points below. There is an example template for your reference:

1. Explain the content in your item that has been taken down, including a description and where it was found - include the URL (this is on the original DMCA notice).
2. Make a formal statement about why you think the content in your item should be reinstated. Include the following words: “I make this statement under penalty of perjury, I have a good faith belief that the content was...[add the reason why the content was not used in an unauthorized way]” (for example “removed or disabled as a result of mistake or misidentification of the content”.
3. Include your full name and contact details, including your address, phone number, and email address.
4. If you are a US resident, include a statement that you consent to the jurisdiction of Federal District Court for the judicial district where you live.
5. If you live outside the United States, include a statement that you consent to the jurisdiction of the courts in Victoria, Australia (where Envato is based), and the courts located in the United States federal district in which the person who sent the DMCA takedown notice (claimant) lives.
6. Include a statement that you will accept service of process from the claimant or their agent.

By law, you need to sign and date your notice either with a digital or physical signature. If you send us the information via Envato Support, please state SIGNED followed by your full name. If you want to sign a physical document you'll need to scan the document and attach it to the help ticket.

We'll send a copy of the DMCA counter-notification to the person who sent the DMCA takedown notice (claimant), then wait 10 business days. Unless the claimant sends us a notice that court proceedings have been filed against you within the 10 business days, we'll then reinstate the content within 14 business days from when we received the counter-notification.

How to submit a General IPR Notice

As the DMCA process only applies to copyright, we have a similar process for other claims (General IPR Notices). If you believe that an Author’s item on Envato Elements is using content that is protected by another form of IPR (not copyright), such as a trademark, we ask you to send us a General IPR Notice that contains the detailed information set out below. We’ve set out an example template which you can use, see GENERAL IPR NOTICE TEMPLATE.

1. Tell us about the content in the Author’s item that you claim infringes your rights, including a description and where we can find it - include the URL;
2. Tell us about the rights you claim, the basis of the ownership claim, and where we can see evidence of your right - include the URL. If you're claiming a trademark right include the trademark registration number, country and class of registration;
3. Give us a detailed explanation about how you believe the content in the Author’s item violates your claimed right; and
4. Include your full name and contact details, including address, phone number and email address.
   You need to sign and date your notice. If you send us the information via Envato Author Help please note that by entering your full name you are providing us with your digital signature which is legally binding. If you want to sign a physical document you'll need to scan the document and attach it to the help ticket.

We will respond appropriately depending on what your claim is about. We may ask for more information and send a copy of your claim to the Author. The Author might contact you directly using the details you've provided.

What to consider if you have received a General IPR Notice or another type of complaint

Complaints about the use of IPRs can cover a wide range of issues. If we send you a general IPR notice or tell you that another type of complaint has been made, we'll generally ask you some specific questions about the complaint and the content or let you know what else is needed.

Template Notices

Select which template you need: 

• DMCA Notice
• Counter Notice
• General IPR Notice

DMCA Notice Template

REQUIRED INFORMATION

TO BE COMPLETED BY YOU

YOUR FULL LEGAL NAME  

[insert your full legal name, not a company name]

YOUR EMAIL ADDRESS

[insert the email address you are sending this notice from]

YOUR STREET ADDRESS

[insert your street address]

YOUR PHONE NUMBER

[insert your phone number]

AUTHOR USERNAME WHOSE CONTENT YOU CLAIM IS INFRINGING

[insert the username of Author whose content you claim is infringing your copyright]

COPYRIGHT OWNER OR AUTHORISED AGENT

Choose one of the statements below:

[I confirm I am the copyright owner of the ALLEGED INFRINGED CONTENT]

OR

[I am the Authorised Agent of the copyright owner of the ALLEGED INFRINGED CONTENT]

ALLEGED INFRINGED CONTENT

This means your copyright content which you claim has been infringed

[Explain:

• Describe your copyrighted content
• The title of your copyrighted content
• What type of content is this?
• Where it appears  - include the URL]

ALLEGEDLY INFRINGING CONTENT AND URLS TO BE REMOVED

This means the Author’s item on our sites which you claim is infringing your copyright  

[Add:

• all content in the Author’s item that you claim has been copied or used without your permission
• Include a description of that content in the Author’s item
• add all links (URLs) to the content Author’s item you claim has infringed your copyright  - make sure it matches the content set out in the above field]

YOU AGREE THIS STATEMENT IS MADE BY YOU:

By submitting this DMCA take down notice to us you agree have made this statement:

"I have a good faith belief that use of the copyrighted materials described above as allegedly infringing is not authorized by the copyright owner, its agent, or the law."

YOU AGREE THIS STATEMENT IS MADE BY YOU:

By submitting this DMCA take down notice to us you agree have made this statement:

"I swear, under penalty of perjury, that the information in the notification is accurate and that I am the copyright owner or am authorized to act on behalf of the owner of an exclusive right that is allegedly infringed."

SIGNED BY YOU

By law, you need to sign and date your notice. If you send us the information via Envato Author Help please note that by entering your full name you are providing us with your digital signature which is legally binding. If you want to sign a physical document you'll need to scan the document and attach it to the help ticket.

[You must sign this notice by either writing your full name here or adding your electronic signature]

This article runs through some frequently asked questions about DMCA takedown notices. You can find answers you might have concerning submitting a DMCA takedown notice with an Author’s item and what to do as an Author when receiving a DMCA takedown notice. If you need further assistance please contact iconicKODES Marketplace Help.

Our approach to DMCA takedown notices and the process followed is outlined in our iconicKODES Marketplace Intellectual Property Policy.

If you believe that an Author’s item on iconicKODES Marketplace is infringing your intellectual property rights (including trademark) then you can submit a General IRP Notice to us.

I think there may be an infringement of my copyright. What should I do?

Consider whether contacting the Author is appropriate. There may be a misunderstanding that you can solve without resorting to the formal processes outlined in the iconicKODES Marketplace Intellectual Property Policy.

Can you give me the contact details of the Author who I claim violated my copyright?

Our iconicKODES Marketplace Authors can be contacted through our system by any registered user. It is free to register and the link to an Author’s profile page and contact form can be found on each page listing their item(s).

The iconicKODES Marketplace Author hasn’t responded to my request or is refusing to remove the content that I think violates my copyright. What now?

You have the option of submitting a DMCA takedown notice to our Customer Success Team. You can find out how to lodge a valid DMCA takedown notice in the iconicKODES Marketplace Intellectual Property Policy.

Why do I need to send a DMCA takedown notice?

Only a relevant judicial authority can rule definitively about whether an item infringes copyright. iconicKODES is not able to do so. Our role is as the service provider of the iconicKODES Marketplace platform. Upon receipt of a valid DMCA takedown notice, we will remove the item from our platform.

Why does the Author who uploaded the item receive a copy of the notice?

A valid DMCA takedown notice should be addressed to the Author of the item identified in the DMCA takedown notice. We pass on the notice to the Author. On receipt of the DMCA takedown notice, the Author may wish to resolve the matter with the complainant or take further steps such as lodging a counter-notification. See more information here.

What if the DMCA takedown notice relates to a component of an item?

If the DMCA takedown notice relates to a specific component of an item, the Author might replace that component, after which the item might be reinstated without a counter-notification being filed (as it is no longer the subject of the DMCA takedown notice).

There are potentially serious consequences to filing DMCA takedown notices, particularly inaccurate ones. Obtain your legal advice as necessary. Do not make false claims, as these could result in penalties for legal damages.

I do not agree that there has been a copyright violation. Can the item be reinstated?

An Author on iconicKODES Marketplace has the option to send iconicKODES a counter-notification or “put back” notice.

For more information about lodging a counter-notification see the iconicKODES Marketplace Intellectual Property Policy. If we receive a valid counter-notification, we will send a copy to the person who submitted the original DMCA takedown notice (claimant), and then wait 10 business days. Unless we receive a notice from the claimant that they have filed a court proceeding against the Author within that time, we will then reinstate the item within 14 business days from when we received the valid counter-notification.

Authors should fully understand the obligations they have by submitting a counter-notification because a counter-notification can trigger legal proceedings from the claimant about the alleged copyright infringement. Obtain legal advice if unsure about this option.

There may be other situations in which the item can be reinstated, such as where the material in dispute can be removed altogether from the item (e.g. it is one stand-alone component within the item). In such a situation, it may be possible for the Author to replace the disputed material before re-submitting the item. In that case, the Authors would not need to send a counter-notification. For more information on this please contact iconicKODES Marketplace Help.

If I’m an Author, how can I unfreeze earnings or have my account reinstated?

Release of frozen earnings will occur at our discretion. For example, if the person issuing the notice retracts the allegations, if we’re compelled to do so by a binding order issued by a relevant judicial authority, or under a relevant agreement settling the dispute.

Account reinstatement is also discretionary as we do not want Authors on our Marketplaceplace who do not respect intellectual property rights. We will not reinstate accounts of Authors who have received multiple DMCA takedown notices in a valid format (where counter notifications have not been lodged).

Cookies, clear gifs and similar technologies (cookies) are used on our sites to personalise content and ads, provide and improve product features and to analyse our traffic on our sites by Envato, our business partners and authors. As a part of our commitment to upholding a high standard of transparency with our users, we’ve created this guide to explain the tracking technologies we use on our sites.

This explanation applies to all of the sites we operate including: www.envato.com, tutsplus.com, themeforest.net, graphicriver.net, videohive.net, photodune.net, 3docean.net, audiojungle.net and codecanyon.net.

What are cookies, clear gifs and similar technologies?

Cookies are a small data file sent to your web browser or mobile device that is stored on your browser cache.

Clear gifs and pixel trackers are tiny graphics with a unique identifier and are similar in function to cookies, and are used to track the movements of web users between pages and websites. They are embedded invisibly on web pages and are about the size of a single pixel.

First-party cookies are set by us when you’re visiting one of our sites, andthird-party cookies are set by a party other than the website you're visiting.

Cookies and similar technologies are used for the following purposes on the Envato sites

Strictly Necessary: Strictly necessary cookies help make a website usable by enabling basic functions like page navigation, website security and access to information that requires authentication.

Preferences: These cookies enable storage of information that changes the way a website behaves or looks, like settings for your region.

Statistics: Statistics cookies help us to understand how visitors interact with our websites by collecting and reporting information.

Marketing: Marketing cookies are used for tracking browsing activity and to customise and display ads that are relevant and engaging.

Third Parties: Our business partners and authors use cookies for the purposes described above.

How to manage your preferences and settings

Please keep in mind that your experience may not be as we intended if you change the standard settings.

Visitors located in the European Union can select their preferences with the preferences panel, and can change their preferences by clearing their cookies, refreshing the page, and selecting their preferences again.

Any interested visitor can learn how to opt out of third party cookies by consulting this page, or learn how to change your browser settings:

1. Firefox
2. Chrome
3. Safari

Contact, questions and changes

We may make changes to the Cookie Policy from time to time and we will take reasonable steps to let our users know about these changes. You can keep track of changes made by referring to the date below.

If you have any questions about our privacy practices, or about how to change your cookie preferences, please contact our privacy champion at privacy.champion@envato.com. You can also write to us at PO Box 16122 Collins Street West Victoria 8007 Australia.

Updated 14 June 2019.

Product Security

At iconicKODES, we understand security and privacy is important because we are in it for the community. This means we’re committed to working with our community, including through our security program to recognize helpful hackers that work with iconicKODES.

Product Security Program

Our Product Security Program allows our community to report product vulnerabilities to iconicKODES. We operate the program based on the following principles:

• Reported issues will be prioritized based on impact on our community, not based on financial incentives.
• Swift resolution based on impact on our community, aiming for less than 72 hours after the report has been made.
• Reported issues will be disclosed by iconicKODES to the community shortly after the resolution of the problem.
• Responsible disclosure, meaning that you give us a fair go in order to resolve the issue before the vulnerability is disclosed to the community. This helps us protect the security and privacy of our community.

Reporting a vulnerability

If you believe you have found a general security vulnerability in an iconicKODES product you can use this form to report the vulnerability to us. We will confirm receipt and follow up with verification and target date for full disclosure following resolution.

For security issues related to your personal account you should contact our friendly Help Team.

Rules

Whilst investigating potential vulnerabilities, you must not:

• Test against any service that isn't owned by iconicKODES. This includes all third party providers despite whether or not they are hosted on an iconicKODES owned/operated subdomain.
• Cause disruption to the availability of any iconicKODES services.
• Attempt to gain access to another user's data or information.
• Impact other users with your testing.
• Attempt non-technical attacks such as social engineering or physical attacks against employees or infrastructure.
• Pivot your approach from one vulnerability to another in order to escalate your access.
• Share sensitive information exposed during the course of finding a vulnerability.
• Violate any laws.

If in doubt, get in touch first!

Scope

Included in scope are any products or services that reside under the following domains that are owned by iconicKODES:

• *.iconicKODES.com
• *.iconicKODES.net
• *.iconicKODES-staging.com
• *.iconicKODES-staging.net
• *.iconicKODESmarketplaces.com
• Items for sale or available for download from any of the iconicKODES Marketplaces.

This program does not offer bounties or rewards, financial or otherwise. In recognition of our appreciation, Helpful Hackers will be added to either the iconicKODES Systems Honor Roll or the iconicKODES Author Item Honor Roll, depending on the scope of the vulnerability.

Qualifying vulnerabilities

While not extensive, this list provides some examples of what we are classing as a security vulnerability and will award to Helpful Hackers.

• Authentication or authorization flaws
• Cross-site scripting
• Cross-site request forgery
• Server-side code execution bugs
• Ability to view another user's personal or sensitive data
• Remote code execution
• SQL injection
• Bypassing of security controls or boundaries

Non-qualifying vulnerabilities

• You are not the first person to identify the vulnerability:
  While we endeavor to address and disclose security reports in a timely manner, it may occur that multiple reports come in for the same issue, in which case we will only award the initial reporter.
• Testing against third party systems/content (even under an iconicKODES subdomain):
  Any system or content that is not owned/operated by iconicKODES cannot be tested without the system owner's explicit permission. We recommend contacting them and reviewing if they have a bug bounty program before engaging in any testing.
• Vulnerabilities that iconicKODES determines to be an accepted risk.
• Vulnerabilities requiring exceedingly unlikely user interaction or steps to exploit.
• Phishing attacks:
  We do not accept phishing of users or staff as a security vulnerability that we can manage or mitigate. If you do find one, please don't hesitate to get in touch so we can take some steps to remove it from public consumption.
• Third party plugins or browser based scripts used to enhance or alter the iconicKODES products:
  If you use a tool to alter how the iconicKODES sites look or interact and you discover a vulnerability with the tool, you are best to disclose the issue to the project maintainer.
• Presence of banner or version information:
  On its own, we don't consider the showing of the product version a vulnerability. However, if you find a very outdated version or think it defines a security risk, please get in touch.
• Denial of service attacks:
  In the interest of service availability, we strongly discourage anyone who uses automated tools that generate significant volumes of traffic that may impact our users.
• General security advice without an identified vulnerability report:
  While it's appreciated that people reach out to our team regarding general security advice such as not using exposed HTTP query parameters, without an attached vulnerability we will not award the submission as on their own they are not a security risk.

If you are ever unsure about whether the vulnerability you are testing is questionable or may fall into the non-qualifying category, please get in touch with us for guidance.