Is it illegal to access content on website hidden by CSS I am not sure if this is the right form to ask this question, so please tell me if I should post this somewhere else. There are some websites (like this) that have part of the page free to view, and the rest of the page is locked behind a paywall/subscription/trial/registration. Now, these websites send over all all the content, even content that is supposed to be behind a paywall, and just hide the content with a CSS class. This means that the page contains all the content, but some of it is hidden by the browser on my end. So, this means that if the CSS engine of my browser breaks, or the stylesheet is not received properly, or I analyze the source of the website, I can read the whole content, without any sort of payment. The whole content is buried in the source of the page, I am not accessing URLs that I am not supposed to. Now, I know that no website is going to care about this, but I am curious, am I breaking any terms and conditions/laws by doing this. On one hand, I am entirely within my rights to see the content that the website is sending in any form I see fit. On the other hand, I am not viewing the content in the way the original authors envisioned. Note: I am in India, and most sites are based in the US or EU. So, I am interested in whichever countries' jurisdiction will apply.
A web site that is serious on protecting some content behind a paywall will put the protected content, or a version of the page with both protected and unprotected content, on separate page or pages, so arranged that a user will not be able to follow the link until that user has signed in and been accepted as an authorized user. A site that merely uses CSS to hide "protected" content is not really protecting it. CSS is designed to be modified by the ultimate user -- that is part of its function. If the site chooses to send you content, you are entitled to read it. Even if some of the content has a CSS tag attached which suppresses or obscures the display of that content, they know perfectly well that any user can supersede this with local CSS, and so I don't see how they have any legal claim, nor any way of knowing if you have accessed the "hidden" content or not. If you attempt to bypass or hack a login screen, that might be circumvention under the US DMCA, or "Unauthorized computer access" under any of several laws.
We cannot and will not try to answer &quot;what should i do?&quot; questions here. Nothing in the linked page makes me think that the views expressed in the previous question here are any less correct. They certainly have not changed the law on copyright. The linked page is an open forum. Many of the posts o9n that thread express ill-informed and incorrect views of how copyright works, and what it protects. Several google searchs find no trace of the suit described in the thread. Note that in US law no copyright claim may be heard in a small claims court, except for the federal copyright office's small claims tribunal. I am not sure if the same is true in Canada, but it might be that the suit was simply dismissed on such a basis. In any case small claims cases do not establish legal precedents in Canada or the US. Of course it is true that anyone can sue over almost anything, even when there is no valid legal basis for the suit. If the suit had been won by the claimant, or even settled that would be larger grounds for worry. A person seriously worried over publishing a book such as that described in the question might do well to consult a lawyer with relevant expertise. A single consultation plus an opinion letter might not cost very much. But 17 USC 102 (b) is very clear that copyright never protects facts, as are the copyright laws of other countries. Note that reports of the events of sports matches are not protected by copyright, although expressive language and analysis may be. 17 USC 102 (b) reads: (b) In no case does copyright protection for an original work of authorship extend to any idea, procedure, process, system, method of operation, concept, principle, or discovery, regardless of the form in which it is described, explained, illustrated, or embodied in such work. Article 2 paragraph (8) of the Berne Copyright Convention provides that: (8) The protection of this Convention shall not apply to news of the day or to miscellaneous facts having the character of mere items of press information. There seems little room for copyright protection of the moves of chess games.
This is relatively uncharted legal territory, so until multiple cases establish some sort of precedent, we can only guess. I know of no legal requirement that a Browser or User has to submit cookies or referrer data or other meta-information accurately. In that regard, a user is unlikely to be prosecuted just for submitting HTTP headers. It is likely closely related to Free Speech issues. The DMCA spells out that it is illegal to circumvent copyright protection measures. While this law is typically used to make it illegal to copy DVDs, video-games or streaming movies, it is possible that the "3-free articles" policy could be interpreted as a copyright protection mechanism, and defeating it by changing HTTP headers is a circumvention. A good summary is here. A specific site's TOS (Terms of Service) probably contains language that spells out it is a violation to use the site in a manner other than as it is intended. This is a typical anti-hacking, anti-screen-scraping provision. Altering a browser session to circumvent their services is probably a violation of the license to access the site, and may open a user to a civil lawsuit for damages or even criminal hacking charges (the details of which are different state-to-state)
It isn't necessarily "illegal" (in the sense you are committing a crime) but you may be in violation of a verbal contract (which would fall under tort law). Let's take this a bit further. Perhaps Joe Schmoe gave you his debit card information so that you could make deposits for him and he said you could take $5 out for yourself for the trouble. This is a contract between you and Joe for a service. You can't extend Joe's offer to Jane Doe by saying "here is some debit card information, take $2.50 out for yourself". You have no right to extend your contract with Joe to somebody else. Now specifically for passwords it basically boils down to the same thing. Unless Joe gives you explicit permission to give that to somebody else, you can't just decide to unilaterally give what Joe gave you to somebody else. This may be different if Joe said "here, I'm buying you a subscription to service XYZ because you are a nice guy", this may be construed as a gift which transfers ownership. At that point you have control over what is or isn't done with the account. As another example let's say Joe let you borrow his car. You can't turn around and say to Jane, "here's a car you can use", Joe did not extend the offer to Jane, nor did Joe give you the right to extend the offer to another person. It's a moot point though, in the original context of this question, Netflix does restrict you from sharing your passwords "outside your household". Almost every paid service has some restriction against sharing with others. In the end Netflix may shut off Joe's account and Joe may sue you for damages, but you aren't going to be thrown in jail for this. This would be a civil case (tort) which you may be liable for monetary damages.
The law in every country where your service is available prevails. That means that if your servers are in Estonia, your file storage is in Lithuania, your company is in Switzerland, you are in France, you hold Thai citizenship, your users are in the USA and the signal transits through the U.K., Belgium, Germany, Canada and Poland then you are subject to the laws of each and every one of them. In addition, if China has reason to believe that the stored files contain matters relating to their citizens then they can take an interest. And so on and so forth ... A country has jurisdiction wherever it wants to have jurisdiction subject to the limits of and its ability to actually enforce its laws. What you are proposing is certainly illegal in many countries and you need to seek professional legal advice - not rely on strangers on the internet.
"I am accessing the data through various API's that I have found through my research. All of the API's are free to use." The API's you "found" and are using may be "free" in a monetary sense - i.e., you don't pay for them and they appear to be public information - but those APIs will have a Terms of Service (TOS) attached to the use of the APIs and the data by the company which provides the APIs. A Terms of service (TOS) (Wikipedia) outlines the legal and acceptable use of the API and is a legally binding contract. Those TOSs may very well restrict the access and end usage of the data, so read the TOS for each API. A TOS is a contract; break the contract - by accessing the data without permission, without a license, by selling the data, or by any other activity expressly restricted - and you open yourself up to possible legal action, which could include copyright and trademark violations, among others. At very least, the companies that run the APIs can deny you access if you break the TOS; at very most, they can sue you. A company being "publicly traded" doesn't mean all the data about those companies is free and publicly accessible. Some may be; other data is compiled by the company which provides the API, and they can restrict access to that data through their TOS. If certain types of data are indeed factual - facts can't be copyrighted - the TOS may still legally restrict usage, because the company developed and owns the format that the data is presented in and the API the data is accessed by. It's possible that you could enter into a licensing agreement with the company that provides the API so you can access the data and monetize it, but that's up to the company, you and your lawyer.
At least as of 2011, when regulations under the Information Technology Act related to privacy and data security were issued (some of the relevant statute sections and regulations are linked in this answer at Law.SE), there was no non-contractual right to have your data destroyed, although a terms of service for a site could give you that right contractually. Instead, usually, a term of service agreement will do exactly the opposite and give a site owner an irrevocable right to keep your data forever. I am not aware of any subsequent statutory, regulatory or case law developments in India which have changed this situation, but that kind of tweak of IT Act regulations in India wouldn't necessary make headlines outside of the local IT industry press coverage in obscure trade journals. The EU is the only place of which I am aware that has any individual right to have data destroyed or suppressed even if it doesn't violated copyright, wasn't obtained illegally and isn't fraudulent or defamatory. Even then, as I understand it, in the EU this is not a unilateral right that applies in all circumstances and is instead a specific remedy for certain situations that have a particularly intense privacy aspect to them.
Social media platforms are not publishers under UK law (at present), as such, they are not legally responsible for the content they host providing that there is a mechanism for alerting them to infringing material and that, when alerted, they remove it. As to "why", that is a political question.