The basics
This is part of the Terms of Service, and it covers you, anyone using a service through you, and anyone you resell to. Obey the law of England and Wales and the law where the service is hosted. Where they differ, the stricter one wins.
Never
- Child sexual abuse material, in any form. No warning, no appeal: we remove it, close the account and report it.
- Content inciting or glorifying terrorism or mass violence, or inciting violence or hatred against people for who they are.
- Intimate images shared without consent, or material made to harass or threaten a specific person.
- Malware, phishing, or data obtained unlawfully, and attacking anyone: unauthorised access, denial of service, botnet control, credential stuffing, or scanning systems you have no permission to test.
- Spam, forged headers, purchased lists.
- Anything unlawful where it is hosted, and anything done to dodge a suspension.
If you run a network with us
Announce only address space you are entitled to, and keep your IRR objects and RPKI ROAs valid; we drop invalids. Do not spoof source addresses, leak routes, or run open resolvers and relays. Keep a working abuse contact and answer it.
VPN and Tor
We do not log what you do over a VPN, and we intend to keep it that way. That is privacy, not immunity; everything here still applies to what you send. Tor exits and relays are welcome; tell us first so we know the abuse reports are expected.
What we will not act against
We will not remove lawful content because someone finds it offensive, embarrassing or commercially inconvenient. Not journalism, not whistleblowing, not protest or union organising. We will not weaken encryption, or turn down a project for making surveillance harder. We do not inspect or filter traffic by its content.
Reporting abuse, and what we do
Report abuse and copyright complaints to abuse@calibour.com with the address, a timestamp and evidence. Found a hole in our own systems? security@calibour.com. We do not go after good-faith researchers.
Most problems are a compromised machine that an email fixes: we tell you, you fix it, and only then do we suspend. Immediate risks we act on first and explain straight after. We always use the least invasive option, tell you what we did and why, and let you challenge it in the console.