Acceptable Use Policy

This Acceptable Use Policy sets out what you may and may not do with a moose box. It applies to everything your box runs, stores and serves, to every app you install on it, and to everyone you let use it. You agree to it when you create a box. It sits alongside our Terms of Service, and where the two differ on how a box may be used, this policy applies.

Your box runs on servers we rent from an infrastructure provider in the European Union. Their rules bind us, and a breach on one box can put every other customer's box at risk. That is why some of the rules below are stricter than the law alone.

Private and public

Your box is yours. What you keep privately on it is your own business: your documents, photos, files and media, whatever they contain, as long as possessing them is lawful. We do not monitor what is on your box.

Content is public when anyone can reach it without signing in: an app you have set to public, or a share link that works for whoever has it. Making content public is publishing it, and published content must follow the rules below. Content that only you, or the people you have given an account on your box, can reach after signing in is private.

Some things are prohibited whether they are public or private, because having them is itself a crime. Above all, child sexual abuse material is never allowed anywhere on a box. We report it to the authorities and to the relevant hotlines, and we do not return it to you.

What you may not publish

You may not publish, or make publicly available from your box:

• Anything that is illegal under the laws of Ireland, the European Union, or the country where your box is hosted.
• Content that infringes someone else's rights, including copyright, trademarks, name rights and data protection rights. This includes distributing copyrighted material you do not have the right to share, for example by seeding it publicly over peer-to-peer networks.
• Pornographic or obscene material.
• Gambling services.
• Extremist content, or content that incites violence or hatred.
• Material that could seriously harm children or young people.
• Defamatory content, or content that insults or disparages people or groups of people.
• Personal data about other people that you have no lawful basis to publish.
• Phishing pages, fraudulent sites, or sites that impersonate someone else.
• Malware, or links and downloads designed to spread it.

What you may not do

Whatever is on your box, you may not use it to:

• Mine, farm or plot cryptocurrencies.
• Scan other networks or IP addresses, or probe them for vulnerabilities, without the written permission of whoever operates them.
• Attack other systems, including denial-of-service attacks, or break into, or try to break into, systems you are not authorised to access.
• Send traffic with a forged source address.
• Run open relays that let strangers send traffic through your box: open mail relays, open proxies, open DNS resolvers, public VPN services, or Tor exit nodes.
• Operate botnets, command-and-control servers, or anything else that controls computers without their owners' consent.
• Get around the limits of the service, or interfere with other customers' boxes or with our systems.

A VPN for your own devices is fine, and so are Tor relays that carry no traffic out to the internet and Tor onion services, as long as what they serve follows this policy.

Email

A box does not run its own mail server. Apps on your box send email through an email provider you sign up for and connect to them, and that provider's own rules apply as well as these. You may not use your box to send spam, meaning unsolicited commercial or bulk email sent to people who have not agreed to receive it, and you may not forge the sender of an email or otherwise hide who sent it.

Fair use of resources

Each box includes a monthly amount of network traffic, shown on our pricing page, and shares its underlying hardware with other servers. Use your box as the personal or business server it is. It is not a content delivery network, a public file mirror, or a download host for traffic that belongs on dedicated infrastructure. If a box's use is well beyond what is typical for its size, we will contact you before we take any action.

People you let use your box

You may give other people accounts on your box, run apps that the public can use, and run your business or your clients' services on it. You remain responsible for everything those people do on or through your box, exactly as if you had done it yourself, and you must make sure they follow this policy.

Keeping your box secure

You are responsible for the apps you install and for the accounts you create. Keep them up to date and use strong credentials. If your box is compromised and starts sending attacks or spam, we treat it as a security incident, not as misconduct: we will contain it, tell you what we saw, and help you put it right. But a compromised box is still subject to the steps under "How we enforce this policy".

Reporting abuse

If you believe a moose box is breaking this policy or the law, write to abuse@mooseos.com. Tell us the address involved (for example name-word.onmoose.io), what you saw and when, and, for a rights claim, what right is being infringed and that you hold it or act for whoever does. We read every report, in English.

How we enforce this policy

We do not look at what is on your box to find breaches. We act on reports we receive, on notices from our infrastructure provider and from the operators of spam and abuse blocklists, and on signals from network traffic such as scanning or attacks leaving your box. Investigating a report may require us to look at the specific content or traffic it concerns.

When we receive a report, we tell you what it concerns and ask you to fix it or to explain why the report is mistaken. You have 48 hours to respond. If you do not respond in that time, or the problem continues, we may restrict your box.

We may restrict a box immediately, and tell you at the same time, when waiting would cause harm: an attack or scan in progress, spam being sent, a box that has been compromised, content that is clearly illegal, or a notice from our infrastructure provider with a deadline shorter than yours.

Restricting a box means turning off its public access or its network, or stopping it. It does not mean deleting it. Once the problem is fixed, we restore the box, and if we end the service because of a breach, we give you the chance to take your data with you, except for content that is illegal to possess or that we are required by law to preserve. For serious or repeated breaches we may close your account under our Terms of Service.

If we act on a report, we tell you why. If you think we have got it wrong, reply to the notice or write to support@mooseos.com and we will look at it again.

Changes to this policy

We may update this policy. Before a change takes effect, we email every box owner about it and update the date at the top of this page. If you keep using your box after the change takes effect, you accept the updated policy.

Contact

Andrei Onel
Abuse reports: abuse@mooseos.com
Everything else: support@mooseos.com