Acceptable Use Policy

An acceptable use policy on a no-KYC host might look like a contradiction. It is not, and the reasoning is worth stating.

Transit providers disconnect networks that host criminal infrastructure. When that happens every customer on the network loses service, including the journalist, the researcher and the person running a VPN for their family. Enforcing this policy is what protects those customers. A host that tolerates malware is not being generous to its users; it is spending their uptime.

Beyond that: a privacy position is worth defending publicly and we intend to keep defending it. Conflating privacy with impunity is the single most effective way to lose that argument, and we are not going to help.

The following result in immediate suspension without notice and without refund, in every location including all 4 marked DMCA-ignored:

• Child sexual abuse material. Any involvement whatsoever. Reported to the relevant authority. No notice, no appeal, no refund.
• Spam and unsolicited bulk email, including snowshoe operations, list-washing, and hosting infrastructure that supports a spam operation run elsewhere.
• Phishing and credential harvesting, including sites impersonating banks, exchanges, hosting providers or any other party.
• Malware — hosting, distribution, or command-and-control. Includes ransomware panels, stealer infrastructure, loaders and botnet controllers.
• Denial-of-service attacks originating from our network, and booter, stresser or DDoS-for-hire services.
• Carding, fraud and stolen-data marketplaces, including infrastructure processing stolen payment data.
• Unauthorised access to third-party systems, including credential-stuffing and exploitation without written authorisation from the target.
• Anything criminal under the law of the country hosting the server.

Because other providers restrict these and customers reasonably ask:

• Tor relays and bridges in every location. Tor exit relays in the Netherlands, Iceland, Romania and Moldova; not in the United States location.
• VPN endpoints, personal or commercial, in every location.
• Cryptocurrency nodes, validators and mining pools. Proof-of-work mining on shared VPS hardware is not permitted, for the ordinary reason that it degrades neighbours.
• Adult content that is lawful in the hosting jurisdiction and involves only consenting adults.
• Torrent traffic and seedboxes in Iceland, Moldova, Panama and Seychelles, and in our 3 EU sites (the Netherlands, Romania and Bulgaria), subject to this policy and applicable law. Copyright complaints may require review or action. Not in the United States location.
• Security research — scanners, honeypots, malware analysis sandboxes and authorised red-team infrastructure. Written authorisation from the target is required for anything touching third-party systems, and we will ask to see it.
• Mail servers, subject to the anti-spam provisions above. Reverse DNS is configurable and we will help with deliverability.
• Content critical of governments, corporations or individuals, subject to the law of the hosting jurisdiction.

Copyright complaints are assessed according to the service location, applicable legal requirements and this policy. A location described elsewhere as DMCA-ignored is not a guarantee that a complaint will be ignored or that content cannot be removed.

We may request information from the customer and take action when a verified policy violation or applicable legal obligation requires it. Where the circumstances allow, customers receive an opportunity to respond. The United States location is subject to the applicable US copyright process.

Send copyright complaints to [email protected]. See the abuse and copyright procedure for reporting details.

Shared infrastructure requires some limits, and ours are deliberately generous:

• Sustained CPU use at 100% across all cores for more than 24 hours on a shared node may prompt a conversation about moving to dedicated hardware. We contact you first.
• Proof-of-work mining is not permitted on shared VPS hardware. It is permitted on dedicated servers.
• Exceeding your bandwidth allowance throttles the port to 10 Mbps for the remainder of the month. We do not bill overage and we do not suspend for transfer.
• Disk I/O patterns that materially degrade neighbours are rate-limited rather than terminated, and you are told when it happens.

Immediate-suspension categories (section 2): suspended on verification, notified afterwards, no refund. Verification means we confirmed the material or activity ourselves — we do not act on an unverified accusation.

Everything else: you receive a description of what we observed and, where the harm allows it, 48 hours to remediate. For a compromised server, remediation can include patching the software and rotating credentials.

Appeals: reply to the suspension notice. Include the order reference and relevant evidence so the decision can be reviewed.

Report abuse to [email protected]. Reports including evidence — logs with timestamps and timezone, headers, packet captures — are actioned considerably faster than assertions.