dudbox

Acceptable use

Last updated

In short:

  • No illegal content, no adult content, no hate speech, and nothing you have no rights to.
  • No spam, scams, attacks, malware or scraping at scale.
  • No email sent straight from our servers: use an email service.
  • No VPNs, proxies, Tor nodes, torrents or crypto mining.
  • No reselling of dudbox, and no tricks to get around limits or payment.
  • You answer for your app and for what its users do in it.
  • Anything that harms others is not allowed, also when this page does not name it. Not sure? Ask us first.
  • If your app puts other apps at risk, we stop it at once. If it happens again, we close your account.
  • People and companies in some countries, or on sanctions lists, cannot use dudbox. See Who can use dudbox.

dudbox runs the apps of many customers on shared servers, behind shared IP addresses. When one app sends spam or attacks a site, the companies that rent us our servers can block an address that every app uses. So these rules apply to every app on dudbox.

You answer for your app and for its users: what they upload, and what they do through your app. A hacked app counts the same as an app that does it on purpose.

Not allowed

Illegal and harmful content

  • Anything that is illegal where you are, where your users are, or where our servers are.
  • Terrorism, violent extremism and human trafficking.
  • Hate speech: content that attacks people for their race, ethnicity, religion, nationality, gender, sexual orientation, disability or a similar trait.
  • Threats to harm people or property, and harassment.
  • Defamation.

Adult content

No adult content of any kind.

Privacy

  • Private information about a person (home address, phone number, ID documents, private photos) made public without their consent.
  • Personal data collected from people without their consent.
  • Fake images, video or audio of a real person, made to fool people or to harm that person.

Other people's rights

  • Content that you have no right to share: films, music, books, games, software.
  • Pirated or cracked software, and counterfeit products.
  • File hosts that pay uploaders by the number of downloads.

Fraud

  • Phishing: pages that look like another site or brand, to get logins, card numbers or money.
  • Pretending to be a person or a company that you are not, or to work for one when you do not.
  • Fake shops, fake products or services, and other scams.

Email

Your app may not send email straight from our servers. Send it through an email service, such as Resend, Postmark or Amazon SES (with their API or their SMTP server). dudbox's own email service is coming later.

Spam is not allowed through any service: email, SMS or chat messages that people did not ask for.

Attacks

  • DoS, DDoS and reflection (DRDoS) attacks, and "stresser" or "booter" services.
  • Access to systems or accounts without permission, or past the access you were given.
  • Attempts to get out of your app's container, or to reach other apps, our internal network or our servers' metadata service.
  • Scans and penetration tests of systems that are not yours, without permission. This includes port scans of the internet.
  • Malware: make, host or spread viruses, worms, trojans, spyware or ransomware, or run botnet control servers.
  • Help others do any of the above, for example with a tool or service made for it.

Things that get us blocked

  • Scraping or crawling other sites at scale: many requests to sites that did not ask for them, or bots that ignore robots.txt or get around blocks, CAPTCHAs or rate limits. An API that you have access to is fine. So is a page that your app fetches when a user asks for it, such as a link preview.
  • URL shorteners that anyone can use, and open redirects (a link in your app that sends people on to any address it is given). Phishers use them to hide their links.
  • Fake clicks, views, sign-ups or reviews.
  • Anything else that puts our IP addresses or our domains on a blocklist.

Network services

  • Public VPNs, proxies and anonymizers: anything that sends other people's traffic out from our IP addresses.
  • Tor nodes.
  • BitTorrent: clients, trackers and seedboxes.
  • IRC servers, IRC bots and IRC bouncers.

Heavy use of shared servers

  • Crypto mining.
  • CPU at full speed all day, every day. Busy hours are fine. Full speed without a stop slows down the apps next to yours.
  • Large amounts of traffic all the time: live video or audio streaming, download mirrors, file hosts. Ask us first.
  • dudbox as plain storage: backups, archives, or images and video that other sites link to.

Your account

  • Reselling dudbox: selling or renting space on dudbox so that others can run their own apps on it. Apps that you build or look after for your clients are fine.
  • Extra accounts, or other tricks, to get around a limit or a payment.
  • Names on dudbox.app taken only to hold them or sell them, and names that look like another brand (like paypal-login.dudbox.app).

Security tests

You can test your own app: scan it, look for weak points, fuzz it. These are not allowed:

  • DoS tests and heavy load tests. Our servers and the edge are shared, so the load hits other apps too.
  • Tests of other customers' apps.
  • Tests of dudbox itself (the website, the dashboard, the API, our servers and network), unless we said yes first.

Found a security problem in dudbox? Write to security@dudbox.com.

Anything else that does harm

This list is not complete. Anything that harms dudbox, our other customers or other people is not allowed either, also when this page does not name it.

Not sure if your app is allowed? Ask us before you deploy it: abuse@dudbox.com.

Who can use dudbox

You cannot use dudbox if you, your company or its owners are in one of these countries, or are organized under the laws of one of them: Afghanistan, Armenia, Azerbaijan, Bahrain, Belarus, Burma (Myanmar), Cambodia, Central African Republic, China (including Hong Kong), Cuba, Democratic Republic of the Congo, Egypt, Eritrea, Georgia, Haiti, Iran, Iraq, Israel, Jordan, Kazakhstan, Kuwait, Kyrgyzstan, Laos, Lebanon, Libya, Macau, Moldova, Mongolia, Nicaragua, North Korea, Oman, Pakistan, Qatar, Russia, Saudi Arabia, Somalia, South Sudan, Sudan, Syria, Tajikistan, Turkmenistan, United Arab Emirates, Uzbekistan, Venezuela, Vietnam, Yemen, Zimbabwe.

This list comes from the US export rules (EAR, Supplement No. 1 to Part 740: country groups D:1, D:4, D:5 and E). When those rules change, the list changes too.

You also cannot use dudbox if:

  • You are on a sanctions list of the EU or the US (such as OFAC's Specially Designated Nationals list).
  • You are a military end user or a government end user, as the EAR (Part 772) defines them.
  • You use dudbox for military purposes or for weapons, including weapons of mass destruction.

If your app has users

If people can upload, post or share things in your app:

  • Remove content when you get a valid notice, or when we send you one, before the deadline in the notice.
  • Block users who do it again.

What we do when a rule is broken

  • If your app puts other apps or our IP addresses at risk (spam, attacks, phishing, malware, illegal content), we stop it at once, with no warning. Then we email you what we saw and what to fix.
  • In other cases (a copyright notice, for example), we send you the notice with a deadline. Before the deadline, fix it, or tell us why the notice is wrong. If you do neither, we stop the app.
  • If it happens again, we close your account.
  • If your app puts our IP addresses on a blocklist, you pay what it costs us to get them off the list.
  • When the law requires it, we, and the companies that rent us our servers, give information about you and your app to the police or a court.

Report abuse

Write to abuse@dudbox.com. Send:

  • The address of the app (like https://yourapp-o3k9x2a.dudbox.app).
  • What is wrong.
  • Proof: the full headers of a spam email, log lines with times and IP addresses, or a screenshot.

Copyright notices (DMCA) go to the same address. Name the work, give the address where it is on dudbox, and say that you own the rights or act for the owner.

Questions about these rules, or "ask us first": write to abuse@dudbox.com too.

Changes

We change these rules when the law changes, or when the companies that rent us our servers change theirs. The date under the title says when this page last changed.

This page as Markdown, for agents: /docs/acceptable-use.md