Home / Legal / Acceptable use policy

Acceptable use policy

Written to be read, not to be survived. If something here is unclear, ask and we will rewrite it.

Version 4.0 · effective 1 November 2026 · applies to all hosted sites and users

1. Scope

This policy applies to all websites and applications hosted on Meridian Digital infrastructure and to anyone using our services, whether or not they hold the contract. It supplements the terms of service.

2. Prohibited services

Our infrastructure may not be used to run, advertise or front any of the following, regardless of jurisdiction:

  • VPN, proxy, relay or tunnelling services — including "smart DNS", encrypted relays and any service whose purpose is to hide or reroute a user's traffic around network controls.
  • Anonymisation or circumvention services of any kind, including tools marketed as a way to access geo-restricted content.
  • Open resolvers, open relays or open proxies reachable from the public internet.

This is a firm rule. If we find such a service on our network, the site is suspended without prior notice and the account is reviewed for termination.

3. Prohibited content and activity

  • Phishing, fraudulent storefronts, fake invoices or impersonation of a brand.
  • Malware, exploit kits, command-and-control infrastructure or droppers.
  • Unsolicited bulk email sent from or advertised through our infrastructure.
  • Child sexual abuse material. We report it to the competent authorities immediately.
  • Counterfeit goods, unlicensed pharmaceuticals, gambling where unlawful, or any product illegal in the market it ships to.
  • Copyright or trademark infringement, including sites whose business is unauthorised distribution.
  • Denial-of-service traffic, scanning of third parties, or credential attacks.

4. Resource use

Sites must run within the resource limits of their plan. Cryptocurrency mining, bulk scraping of third-party sites, and load testing that is not announced to us in advance are not permitted. We will ask you to move to a larger plan before we throttle anything.

5. Security testing

Testing your own site is welcome if you tell us first — write to [email protected] with the target, window and source address. Unscheduled scanning of our shared infrastructure is treated as a policy breach even where the intent is research.

6. Enforcement

Where we identify a breach we will usually contact the account holder first and ask for it to stop, with a deadline that reflects severity. We may suspend immediately, without prior notice, where the activity is criminal, harms third parties, or involves a prohibited service under section 2. Evidence is retained, and a person — not an automated system — reviews appeals.

7. Reporting abuse

Send reports to [email protected] with timestamps in UTC and the offending address or URL. We acknowledge within one business day and tell the reporter the outcome where we are able to.

8. Repeat infringement

Accounts subject to three substantiated, unrelated abuse findings within twelve months may be terminated. Fees for the remainder of the term are not refunded in that case.

9. Changes

We may amend this policy to address new abuse patterns or legal requirements. Material changes are notified to account contacts at least 14 days in advance.