Acceptable Use Policy

Effective [Effective date]

This policy is part of the Terms of Service. It applies to everything you run on wabi: services, databases, static sites, builds, and the traffic they send.

Not allowed

Fraud and deception

Phishing, wallet drainers, and any page or service that tricks people into signing transactions, approving token spending, or revealing keys or recovery phrases.
Impersonating a wallet, exchange, project, company or person.
Scams, fake giveaways and investment fraud.

Harmful software

Malware, ransomware, spyware, and command-and-control servers.
Cryptocurrency mining.

Attacks and abuse of networks

Denial-of-service attacks, port scanning, brute-forcing, and exploiting systems you don't own or aren't authorized to test.
Open proxies or relays used to hide abusive traffic.
Sending email directly: outbound mail ports are closed. Use an email provider's API.
Probing, attacking or trying to get around the isolation between wabi's customers, or wabi's own systems.

Illegal and harmful content

Anything illegal where it is published or accessed.
Child sexual abuse material, which we report to the authorities.
Content that infringes others' copyright, trademarks or other rights.
Harassment, threats, and the collection or publication of people's personal data without a lawful basis.

Resource abuse

Using the free tier for anything but static sites, or creating accounts to get around its limits.
Sustained use designed to degrade the service for others.

How we enforce it

Every static site upload is scanned for phishing and wallet drainers before it goes public. A match holds the upload for review.
Published sites are checked against Google's Web Risk lists.
Services pinned at their CPU limit for hours are reviewed for mining.
Reports reach us at abuse@wabi.is or through the report form at wabi.is/report.

Depending on what we find, we hold or remove the content, stop the service, or suspend the account. Phishing, drainers and malware come down at once. Where we can, we tell you what we found and give you a chance to respond.

Security research

Testing your own services is fine. Testing wabi itself needs our written permission first: write to abuse@wabi.is.