Acceptable use

Last changed on 6 October 2026. This policy is part of the terms of service. It exists because one account can ruin a server for everyone on it.

What must not be on our servers

• Anything illegal where it is published or where we are: content that infringes copyright, trade in counterfeit goods, material depicting the abuse of children, incitement to violence.
• Phishing pages, malware, exploit kits, command-and-control for botnets, stolen credentials or card data.
• Unsolicited bulk email, bought address lists, or a mailing you cannot show consent for. Mailboxes are for a company's own correspondence, not for a campaign engine.
• Attacks launched from the account: scanning, brute force, denial of service, proxying someone else's traffic.
• Mining of cryptocurrency, torrent seeding, video transcoding, public file dumps — work that turns a shared plan into a compute farm.
• Open mail relays, open DNS resolvers, and anonymising proxies or VPN exits.

Shared resources

The plan limits are published in numbers so that nobody has to guess. PHP workers and mailboxes are hard caps; disk is measured every night. If a site keeps a server's CPU or memory busy to the point where its neighbours suffer, we write to you with what we measured and give you a working day to fix it or to move up a plan. We only act faster when the server is going down now.

Reporting abuse

Write to abuse@sponge.digital with the address and, if you can, the evidence: a URL, a mail header, a log line with a timestamp and a time zone. Reports from rightsholders and from CERTs are read first. We do not act on an anonymous demand to remove lawful content.

What suspension looks like

For phishing, malware or an outbound spam run we suspend the single site or mailbox at once and email the account the same day with what we saw. For everything else we write first and act after the deadline in that email. A suspended site serves a short notice page; nothing is deleted. If you fix it and tell us, we switch it back on — there is no fee for that.

Repeated suspensions for the same cause end the contract, with your data available for export for 30 days.