Acceptable Use Policy

Prohibited activity

Do not publish phishing or credential-harvesting content, impersonate another organization, link to malware, disclose secrets or someone else’s personal data, or make deliberately misleading status claims.

Do not attempt to access other accounts, bypass rate or plan limits, flood ingestion endpoints, point checks or webhook notifications at systems you are not authorized to send traffic to, or connect a domain you do not control.

Content and identity

Public pages never run scripts or contain forms. Reserved brand names are refused, and addresses or names that resemble a well-known brand are held for review before they go public. On new accounts, incident text flagged by screening is held for review while the service status itself still shows.

Reports and enforcement

Anyone can report a page at /report-abuse without an account; every public page links to it. A company whose brand a page imitates can prove ownership of its domain with a DNS record, which puts its claim first in the review queue.

A person reviews every report. Confirmed abuse is taken down from the page, its feeds and badge at once, and the owner cannot republish it.

TODO: monitored abuse and security contact address, response-time commitment (proposed 24 hours), notice to the page owner, and appeal path.