Skip to content
dply/edge

Legal

Acceptable Use Policy

Last updated 2026-11-04

dply runs many customers’ apps on shared infrastructure. This policy sets out what you may not do with it. It is part of the Terms of Service and applies to everyone who uses dply, and to every app and resource hosted on it.

1. Prohibited content

Do not host, store, send or link to:

  • Anything illegal where you, your users or dply are, or that promotes illegal activity.
  • Child sexual abuse material, or any content that sexualizes minors. We report it to the National Center for Missing & Exploited Children (NCMEC) and to law enforcement.
  • Malware, viruses, ransomware, spyware, or other harmful code, including command-and-control servers.
  • Phishing pages, or sites that impersonate another person, brand or service to deceive people.
  • Content that infringes someone else’s copyright, trademark, privacy or other rights.
  • Harassment, threats, incitement to violence, or content that promotes terrorism.
  • Personal data about others that you have no right to publish, such as leaked credentials or doxxing.

2. Prohibited activity

Do not use dply to:

  • Send spam or unsolicited bulk messages, or host sites advertised that way.
  • Mine cryptocurrency.
  • Attack other systems: denial-of-service, flooding, or generating abusive load on dply or anyone else.
  • Scan, probe or test the security of systems you do not own or have permission to test.
  • Get around plan limits, trial caps, fair-use limits, billing, or the isolation between customers, including by opening multiple accounts or trials.
  • Access, or try to access, another customer’s data, apps or resources.
  • Resell or sublicense dply as a hosting service without our written permission. Building and hosting apps for your own clients is fine.
  • Run proxies, VPNs or open relays that let others hide abusive traffic.
  • Break the policies of the infrastructure dply runs on, including Cloudflare’s terms and acceptable use policies.

3. Security testing

You may test the security of your own apps and your own dply accounts. When you do, don’t access, change or delete data that isn’t yours, don’t degrade the service for others (no denial-of-service or load testing against shared infrastructure), and stop and tell us if you reach someone else’s data. Report vulnerabilities in dply itself under our responsible disclosure policy.

4. Public files and share links

Files you serve publicly, such as a bucket served on a public path, and anything reachable through a share link, access key or token you create, are your responsibility under this policy, the same as content on your site. Do not use them to distribute content this policy prohibits. Revoke links and keys you no longer need.

5. Enforcement

If we find or are told about a violation, we may, depending on how serious it is:

  • remove or disable the content, site, app or resource;
  • suspend the organization or account;
  • terminate the account, for serious or repeated violations;
  • report illegal activity to the authorities.

We tell the owner what was reported and what we did, unless doing so would put someone at risk, hamper an investigation, or break the law. If you think we made a mistake, reply to the email you received.

7. Reporting abuse

To report a site on dply for phishing, malware, spam or other abuse, email hello@dply.io with “Abuse” in the subject line. Report abuse explains what to include and what happens next.

Questions: hello@dply.io