Acceptable Use Policy

Version 0.1 — November 6, 2026

NameStand provides shared infrastructure and Internet services.

That works only when customers use those services responsibly.

This Acceptable Use Policy describes activities that are not permitted when using NameStand services. It is incorporated into the NameStand Terms of Service.

The basic rule is simple:

Don’t use NameStand services to harm people, attack systems, abuse networks, break the law, or make the service unusable for everybody else.

The sections below provide the longer version.

Who this policy applies to

This policy applies to customers and to anyone using a NameStand service through a customer’s account or authorization.

Customers are responsible for taking reasonable steps to ensure that authorized users of their services comply with this policy.

A compromised account or application can also create problems even when the customer didn’t intentionally violate the policy.

If that happens, our first priority may be stopping the harmful activity before determining how it started.

Lawful use

NameStand services may be used only for lawful purposes.

You may not knowingly use NameStand services to:

• Commit or facilitate unlawful activity.
• Defraud another person or organization.
• Participate in theft or identity theft.
• Facilitate unauthorized access to systems or data.
• Distribute unlawful material.
• Violate applicable court orders or legal requirements.
• Knowingly assist another person in using NameStand services for unlawful activity.

NameStand is an Internet-service provider, not a court.

We do not intend to resolve every disagreement about legality ourselves.

Where a legitimate legal dispute exists, we may require appropriate legal process before taking action unless immediate action is reasonably necessary to protect systems, customers, or others.

Unauthorized access and attacks

You may not use NameStand services to gain or attempt to gain unauthorized access to another computer, account, application, network, device, or service.

Prohibited activity includes knowingly using NameStand services to conduct or facilitate:

• Unauthorized penetration testing
• Password attacks
• Credential stuffing
• Exploitation of vulnerabilities without authorization
• Network intrusion
• Unauthorized vulnerability scanning
• Denial-of-service attacks
• Distributed denial-of-service attacks
• Destructive attacks
• Other malicious activity directed at systems or networks

There is an important distinction between security testing and attacking somebody else’s systems.

Authorized security testing performed within the scope permitted by the system owner is different from unauthorized access.

If legitimate security testing will originate from NameStand infrastructure, contact us beforehand. Some testing may require prior approval or a service specifically suited to that activity.

Malware

NameStand services may not knowingly be used to create, distribute, host, control, or facilitate malicious software or infrastructure intended to compromise other systems.

That includes malicious use involving:

• Viruses
• Worms
• Trojans
• Ransomware
• Botnets
• Credential-stealing software
• Malicious scripts
• Backdoors
• Web shells
• Command-and-control infrastructure
• Other malware

Legitimate security research, malware analysis, or defensive work may require a specialized environment and prior written approval.

Shared hosting is not a malware laboratory.

Phishing, fraud, and impersonation

NameStand services may not be used for phishing, credential theft, fraudulent impersonation, deceptive payment collection, or similar attempts to obtain information or property through deception.

That includes websites, email, applications, or other services intended to impersonate another person or organization for fraudulent purposes.

If an account is compromised and begins serving phishing material without the customer’s knowledge, we may suspend or isolate the affected service immediately while the incident is investigated.

Email and spam

NameStand does not tolerate unsolicited bulk email or other abusive messaging practices.

You may not use NameStand services to knowingly:

• Send unsolicited bulk commercial email.
• Send large quantities of unsolicited messages.
• Operate open mail relays.
• Harvest email addresses for unsolicited messaging.
• Use purchased, scraped, or improperly obtained mailing lists.
• Send deceptive or fraudulent email.
• Distribute malware or phishing messages.
• Circumvent reasonable email-abuse controls.
• Use another provider to send spam advertising a site or service hosted by NameStand.

Customers using mailing lists or bulk-mail systems are responsible for obtaining appropriate permission from recipients and honoring applicable unsubscribe requests and legal requirements.

A compromised website or mailbox that begins sending spam can damage mail delivery for other customers.

When that happens, NameStand may disable the affected account, script, mailbox, or sending function while the problem is investigated and corrected.

The objective is to stop the abuse first and sort out the cause second.

Intellectual property

You may not knowingly use NameStand services to infringe another person’s or organization’s copyright, trademark, trade secret, or other intellectual-property rights.

Customers are responsible for ensuring they have appropriate rights to content, software, media, designs, code, and other material they publish or distribute.

NameStand may respond to legitimate notices of alleged infringement in accordance with applicable law.

A complaint does not automatically prove that infringement occurred.

We may request additional information or appropriate legal documentation when circumstances warrant it.

Privacy and unauthorized data collection

NameStand services may not be used to unlawfully obtain, disclose, sell, publish, or misuse another person’s private information.

Prohibited activity includes malicious or deceptive credential harvesting, unauthorized collection of authentication information, and other unlawful acquisition of personal data.

Customers operating websites or applications that collect user information are responsible for complying with applicable privacy and data-protection requirements.

Pornographic and sexually explicit content

NameStand does not permit its services to be used to host, publish, distribute, sell, stream, transmit, or provide access to pornography or sexually explicit adult content.

This prohibition applies regardless of whether the material is commercial, subscription-based, advertising-supported, privately distributed, or provided without charge.

NameStand services also may not be used primarily to operate or support services whose purpose is the distribution or sale of pornographic or sexually explicit material.

This policy does not prohibit legitimate non-explicit educational, medical, scientific, newsworthy, or informational material merely because it discusses human sexuality, reproductive health, or anatomy.

When the distinction is unclear, contact NameStand before deploying the content or service.

Child sexual abuse material

Child sexual abuse material is strictly prohibited.

NameStand may immediately disable access to suspected child sexual abuse material and will comply with applicable legal reporting, preservation, and other requirements.

This is not an area where we provide a warning and wait a few days to see if everybody can work things out.

Non-consensual intimate material and sexual exploitation

NameStand services may not be used to knowingly host, publish, distribute, transmit, or provide access to intimate or sexually explicit material obtained or distributed without the consent of the person depicted where prohibited by law.

NameStand services also may not be used for:

• Sextortion
• Sexual blackmail
• Sex trafficking
• Sexual exploitation
• Coercive distribution of intimate material
• Similar unlawful or abusive activity

NameStand may take immediate protective action when credible information indicates that a service is being used for these purposes.

Threats and harmful activity

NameStand services may not be used to make credible unlawful threats, coordinate unlawful violence, or conduct activity intended to cause unlawful harm to another person or organization.

This does not prohibit lawful discussion, commentary, journalism, political speech, security research, or other lawful expression merely because somebody finds it offensive or disagreeable.

Network abuse

You may not use NameStand services in a way that intentionally disrupts or interferes with:

• NameStand infrastructure
• Upstream networks
• Other customers
• Third-party systems
• Internet services
• Network equipment

Examples include:

• Denial-of-service activity
• Packet flooding
• Malicious scanning
• Spoofing
• Unauthorized network probing
• Deliberate protocol abuse
• Attempts to bypass technical restrictions
• Other activity intended to impair network operation

Shared-resource abuse

Shared hosting means resources are shared.

One account cannot reasonably consume enough CPU, memory, storage I/O, processes, database resources, or other system capacity to materially degrade service for everyone else.

NameStand does not intend to create arbitrary resource thresholds merely for the pleasure of suspending customers.

If a website legitimately grows beyond the capacity of its current service, we’d generally rather identify an appropriate solution.

That might involve:

• Fixing inefficient or malfunctioning software.
• Optimizing the website or application.
• Adjusting configuration.
• Moving to a different service.
• Moving to another provider better suited to the workload.

However, NameStand may restrict or suspend a service when resource consumption materially threatens system availability or other customers.

Shared hosting is for hosting

Shared web-hosting space is intended primarily for websites, web applications, and related service data.

Unless a particular plan says otherwise, shared hosting should not be treated as:

• General-purpose cloud storage
• A personal backup archive
• A large software-distribution mirror
• Long-term archival storage
• A video-distribution platform
• A high-volume file-sharing service
• A cryptocurrency-mining platform

If your use case needs something different, ask.

There may be a more appropriate solution.

Cryptocurrency mining

Cryptocurrency mining is not permitted on shared NameStand hosting services.

Other cryptocurrency- or blockchain-related applications may be evaluated based on their technical requirements, legality, resource consumption, and risk.

Proxies, VPNs, relays, and similar services

Public proxy services, VPN exit nodes, anonymizing relays, public recursive DNS services, and similar network-facing services may create security, abuse, resource, and reputation concerns.

They are not permitted on shared hosting unless NameStand has specifically approved the use in writing.

If you have a legitimate requirement for such a service, talk to us before deploying it.

IRC, bots, automation, and long-running processes

Bots, chat services, automation, scheduled tasks, background processes, and similar software may be permitted when they fit within the technical limits and intended purpose of the purchased service.

Shared hosting is not automatically appropriate for every continuously running application.

Applications that consume unreasonable shared resources, create abuse problems, or require capabilities outside the purchased service may need to be changed, restricted, moved, or hosted elsewhere.

Ask before assuming.

It’s cheaper than discovering the answer because something caught fire.

Vulnerable or compromised software

Customers are responsible for applications and software they maintain unless NameStand has specifically agreed to maintain them.

If a website, CMS, plugin, extension, theme, script, or other application is compromised or presents a significant security problem, NameStand may:

• Contact the customer.
• Restrict access.
• Disable the affected component.
• Isolate the website or account.
• Suspend the affected service.
• Take other reasonable protective action.

Immediate action may occur before customer notification when necessary to protect systems or others.

Once the immediate risk is controlled, we’ll work with the customer to determine what happened and what reasonable remediation is required.

Resale and account sharing

Whether a customer may resell hosting, provide services to third parties, or operate multiple unrelated customer sites under one account depends on the purchased service.

A standard hosting account should not be treated as a reseller account unless the service description allows it.

Customers remain responsible for activity occurring through accounts and services they control.

Circumventing service limits

You may not intentionally bypass or defeat technical limits, security controls, account restrictions, billing controls, authentication systems, or other mechanisms used to operate NameStand services.

If a service limit doesn’t meet your needs, talk to us.

Circumventing it is not the upgrade path.

Abuse involving other providers

The fact that abusive traffic originates from somewhere other than NameStand does not necessarily make the activity acceptable.

For example, you may not use a third-party mail provider to send spam advertising a website hosted on NameStand infrastructure.

Likewise, NameStand services may not knowingly be used as part of a larger abusive operation simply because the other components live somewhere else.

Legal requests

NameStand will respond to valid legal process as required by applicable law.

We will not voluntarily treat every angry email containing the words “my attorney” as a court order.

Where legally permitted and appropriate, NameStand may notify affected customers of legal requests involving their information or services.

Investigating abuse

NameStand may investigate credible reports of abuse or policy violations.

Investigations may involve reviewing information reasonably necessary to understand:

• What happened
• Whether a service is compromised
• Whether the activity violates this policy
• Whether immediate protective action is necessary
• What remediation is appropriate

We do not intend to inspect customer content for entertainment, curiosity, or unrelated purposes.

Investigation should be reasonably connected to operating, securing, supporting, or protecting the service.

Enforcement

NameStand’s preferred response to ordinary, correctable problems is:

1. Identify the problem.
2. Contact the customer when practical.
3. Explain what needs to change.
4. Give the customer a reasonable opportunity to correct it.
5. Help determine an appropriate solution when possible.

That process is not appropriate for every situation.

NameStand may act immediately when activity presents a significant threat involving:

• Malware
• Phishing
• Spam
• Network attacks
• Compromised systems
• Illegal activity
• Child sexual abuse material
• Non-consensual intimate material or sexual exploitation
• Fraud
• Serious threats
• Significant disruption
• Other urgent security or legal concerns

Possible enforcement actions include:

• Warning
• Required remediation
• Restricting functionality
• Blocking traffic
• Disabling mail sending
• Isolating files or applications
• Temporary suspension
• Permanent termination
• Preservation of information where legally required
• Reporting where legally required

Enforcement should be proportional to the problem when circumstances allow.

Repeated violations

Repeated violations may result in stronger enforcement even when each individual incident might otherwise have been correctable.

If the same compromised script repeatedly causes abuse because nobody fixes it, eventually the problem is no longer merely the script.

Costs caused by abuse

If customer activity or a compromised customer service causes substantial cleanup, incident response, third-party charges, blacklist remediation, emergency administration, or other unusual work, NameStand may charge reasonable fees for that work when permitted by the applicable service agreement.

We won’t invent an automatic $500 punishment because a spam filter sneezed.

If unusual billable cleanup is required, the charge should reflect the work and costs involved.

Reporting abuse

Suspected abuse involving NameStand services may be reported to:

support@namestand.com

Please provide enough information for us to identify the affected service and understand the complaint.

Useful information may include:

• Domain name
• IP address
• Relevant URLs
• Email headers
• Log excerpts
• Dates and times
• Description of the activity
• Other evidence relevant to the report

Do not send passwords or unrelated sensitive personal information merely because you are reporting abuse.

Good-faith security reports

If you believe you’ve discovered a security problem affecting NameStand itself, contact:

support@namestand.com

Please provide enough detail for us to understand and reproduce the issue.

Do not use a suspected vulnerability to access data you don’t own, disrupt services, establish persistence, or expand testing beyond what is reasonably necessary to demonstrate the problem.

We appreciate good-faith reports.

Surprises are useful at birthday parties.

Less so in production infrastructure.

Changes to this policy

NameStand may update this Acceptable Use Policy as services, technologies, abuse patterns, and legal requirements change.

Material changes will be communicated in a reasonable manner appropriate to affected services.

The version and date shown at the top identify the currently published policy.

Questions

If you’re not sure whether a particular use is appropriate, ask before deploying it.

For technical questions:

support@namestand.com

For sales or pre-sales questions:

sales@namestand.com

We’d much rather answer a question beforehand than discover an unexpected production workload afterward.

The short version

Use NameStand services for legitimate purposes.

Don’t attack people.

Don’t spam people.

Don’t steal credentials.

Don’t distribute malware.

Don’t host pornography or sexually explicit content.

Don’t interfere with other customers.

Don’t turn shared hosting into something it wasn’t designed to be.

Keep software reasonably secure.

And if your use case is unusual, talk to us before assuming the answer is no.