Acceptable use policy
Effective · Version 1.0
This policy forms part of the terms of service and applies to every account. It exists because a network sourced as carefully as ours can still be misused, and because a provider that will not say what it prohibits is not really prohibiting anything.
1. Prohibited activity
You may not use the service to do any of the following. This list is illustrative, not exhaustive — conduct that shares the purpose of an item below is prohibited even where it is not named specifically.
- Gain or attempt to gain unauthorised access to any system, account, or data, including credential stuffing, brute forcing, and exploitation of vulnerabilities you are not authorised to test.
- Conduct denial-of-service activity, or generate load intended to degrade a destination rather than to collect from it.
- Distribute malware, operate command-and-control infrastructure, or support the operation of a botnet.
- Send unsolicited bulk messaging, or support phishing, fraud, or impersonation of a person or organisation.
- Acquire, transmit, or process child sexual abuse material, or material that incites violence or terrorism.
- Circumvent authentication, paywalls, or access controls in order to obtain data you are not entitled to.
- Collect personal data in breach of applicable data protection law, including scraping special category data without a lawful basis.
- Infringe intellectual property rights, or breach a destination’s terms where doing so is unlawful in your jurisdiction.
- Resell, sublicense, or otherwise provide access to the network to a third party without written agreement.
- Evade a suspension, or operate on behalf of a party we have previously suspended.
- Operate in or on behalf of a sanctioned jurisdiction, entity, or individual, as described in section 4.
- Commit or facilitate payment or marketing fraud, including using stolen payment methods, referral-programme abuse, creating fake accounts, bidding on a competitor’s trademarks in ad auctions, or operating a pyramid or multi-level-marketing scheme.
2. Rate and load conduct
Collection should not impose a burden a destination would reasonably object to. Respect published rate limits, back off on error responses, and do not parallelise around a limit a destination has set. Where a destination asks us to stop specific traffic, we will contact the responsible account before taking any action of our own, unless the conduct is plainly abusive.
3. Restricted sectors
We decline accounts whose stated or observed purpose is stalkerware, surveillance of individuals without lawful authority, harassment infrastructure, or the operation of services that exist principally to defeat fraud controls. This is a commercial decision as much as a legal one and is applied at onboarding and continuously thereafter.
4. Sanctions and verification
We do not provide the service to, or for the benefit of, anyone who is the subject of sanctions administered by the United States, the European Union, the United Kingdom, or the United Nations, or anyone located, organised, or ordinarily resident in a comprehensively sanctioned country or region, including Cuba, Iran, North Korea, Syria, and the Crimea, so-called Donetsk People’s Republic and so-called Luhansk People’s Republic regions of Ukraine. You may not use the service to route traffic on behalf of any of them, or to evade sanctions or export controls.
We may ask you to verify your identity, your organisation, or your use case at any time, including in response to a report or to activity on your account. We may restrict or suspend the service until verification is complete, and close accounts where it cannot be completed.
5. Reporting abuse
Send reports to [email protected]. Include the exit IP address, timestamps with timezone, and the observed conduct. Every report receives a case number and an acknowledgement within four hours. We can attribute traffic to an account, and where a report is substantiated, we act on it.
6. Enforcement
- First substantiated report: we contact the account owner with the evidence and require remediation within the period we state in that notice, which reflects the seriousness of the conduct.
- Serious or repeated breach: immediate suspension of the affected services or the whole account.
- Unlawful conduct: immediate termination, and cooperation with law enforcement where legally required.
We tell an account owner why they were suspended unless prohibited from doing so, and we log every suspension decision and its outcome. An account terminated for breach of this policy receives no refund, as the refund policy sets out.
7. Appeals
A suspended customer may appeal in writing to [email protected]. Appeals are reviewed by someone who was not involved in the original decision, within five business days.
8. Changes
We may update this policy on 30 days’ notice, or immediately where a change is required by law or to address an active threat.