Acceptable Use Policy

Expression and Content

We support freedom of speech, privacy, and lawful expression, including political speech, journalism, research, advocacy, criticism, and controversial or unpopular opinions. We do not restrict or terminate a Service solely because of a viewpoint, criticism of Mynymbox, or lawful speech. A complaint or notice alone does not establish that content is unlawful or violates this AUP. Lawful discussion of sensitive subjects does not itself violate this AUP. These commitments do not permit unlawful conduct, infringement of others’ rights, serious abuse, or other activity prohibited below.

Prohibited Activity

Tier 1: Prohibited activity with no cure period

Hosting or using a Service for any activity below is prohibited. Upon confirmed discovery, we will immediately suspend the affected account or Service without a notice or cure period. A Tier 1 violation is not eligible for a cure period, and no refund will be issued for the affected account or Service, except where required by applicable law or the Terms of Service.

• Child sexual abuse material (CSAM): Any image, video, text, or illustration depicting the sexual abuse or exploitation of a minor. We report suspected CSAM to the National Center for Missing & Exploited Children (NCMEC) in accordance with applicable reporting obligations and procedures, regardless of the Service’s hosting location.
• Credible threats of violence: Specific, actionable threats against an identifiable person or group, including threats involving swatting, kill lists containing personal addresses, or incitement to imminent unlawful violence. We report credible threats to relevant law-enforcement authorities where appropriate and lawful.
• Phishing and credential theft: Phishing kits or services targeting financial institutions, cryptocurrency exchanges or wallets, Mynymbox customers, or other third parties. This includes credential-stealing pages, fake exchange interfaces, and command-and-control infrastructure for clipboard-hijacker malware.
• Ransomware command-and-control: Infrastructure used to control or operate ransomware.
• Originating DDoS attacks: Direct, reflected, or amplified denial-of-service attacks against non-consenting third parties.

We may take temporary protective action before completing our review where information reasonably available to us indicates a possible Tier 1 violation or an immediate risk. Confirmed discovery means our determination based on the information reasonably available to us; a criminal conviction or court ruling is not required. Where practicable and lawful, we will explain the action and provide a way to request review.

Tier 2: Prohibited activity with 48h cure period

The following activities are also prohibited. Where the issue can safely be corrected, we will give written notice and a window of 48 hours to correct it. A cure period is not guaranteed and may be shortened or omitted where necessary to address risk, harm, a security compromise, legal obligations, a binding order, or an applicable provider requirement.

• Malware, spyware, botnets, exploit kits, malicious payloads, or related infrastructure, other than Tier 1 activity listed above.
• Unauthorized scanning, brute-forcing, exploitation, intrusion, access-control evasion, or interference with systems or networks. Security testing authorized by the system owner or operator is permitted.
• Unsolicited bulk email, spam infrastructure, open SMTP relays or proxies used for spam, email harvesting, purchased mailing lists, deceptive or forged message information, or messages containing malicious or deceptive material.
• Open recursive DNS resolvers abused for amplification attacks, or compromised Services distributing malware where the issue can reasonably be corrected.
• Unlawful content or activity; copyright, trademark, privacy, or other third-party rights violations; doxxing; or unauthorized disclosure of personal information.
• Fraud; evading a previous Mynymbox suspension or termination; bypassing quotas, access controls, security measures, or rate limits; or disrupting or degrading Mynymbox, customer, or third-party systems.
• Trafficking, exploitation, or abuse of minors; or the sale, distribution, advertising, manufacture, or facilitation of unlawful controlled substances, prescription drugs, research chemicals, precursors, or related paraphernalia.
• Knowingly providing material infrastructure or assistance for serious criminal activity, including trafficking, exploitation, fraud, extortion, sale of stolen data, or malware distribution.
• Resource use that materially affects shared infrastructure or other customers, or activity that violates applicable law, a binding order, or a specific requirement of a provider applicable to the Service.

Generally Permitted Uses

Subject to applicable law, this AUP, service-specific restrictions, and requirements applicable to the Services, the following are generally permitted:

• Lawful political speech, controversial opinions, journalism, and research.
• Lawful adult content involving consenting adults.
• Cryptocurrency nodes and related software; cryptocurrency mining is not permitted.
• VPN and privacy services, Tor relays, exit nodes, and related infrastructure.
• Other lawful content and services that do not violate this AUP.

Permission for an activity does not permit fraud, spam, attacks, infringement, unlawful conduct, or violation of an applicable provider requirement.

Reports

Send abuse or infringement reports to abuse [at] mynymbox [dot] io or use another reporting method published by Mynymbox. Keep the published reporting method accessible and monitored. Reports should include, as applicable:

• The reporter's contact information, unless anonymous reporting is legally permitted.
• The affected domain, IP address, URL, account, or Service and a description of the alleged issue.
• Supporting information, such as dates, logs, screenshots, or the specific material at issue.
• For an intellectual-property report, identification of the protected work or right and the material alleged to infringe it.
• Confirmation that the information is accurate to the reporter's knowledge and, where relevant, that the reporter is authorized to act for the rights holder.

A report (including one labelled a "DMCA notice") is an allegation, not a court order or determination. We assess reports under applicable law, our agreements, and applicable provider requirements; we do not automatically remove content solely because a complaint is received. We may forward a report to the email address on your account and ask you to respond or correct the issue, normally within 48 hours where immediate action is not required.

Enforcement and Review

Depending on the circumstances, we may request information or corrective action; remove or disable content; throttle or block traffic; restrict, suspend, or terminate a Service or account; preserve relevant information where lawful; notify affected parties or providers; or report suspected criminal activity to appropriate authorities.

We assess the available information and may consider the nature, severity, duration, scope, credibility, intent, and impact of the activity, as well as any explanation or corrective steps. Tier 1 violations are subject to immediate suspension upon confirmed discovery and have no cure period. For other violations, we may provide a correction period as described above. We may also take temporary action before completing a review where reasonably necessary to protect Mynymbox, our customers, our network, or a third party. Where practicable and lawful, we will explain the action and provide a way to respond or request review. We may delay or limit notice where legally prohibited or where notice could create significant risk, cause ongoing harm, compromise an investigation, or interfere with a binding order.

If you believe an enforcement decision was made in error, contact abuse [at] mynymbox [dot] io with the affected Service, the decision, and supporting information. We will review requests where required by law or reasonably practicable. This process does not limit either party’s rights under applicable law. No refund is issued for a Service terminated for violating this AUP, except where required by applicable law or the Terms of Service.