Acceptable Use Policy

This policy sets out what you can and can't do with an NLH hosting account or mailbox. It exists to protect every client on the platform, because one account's behaviour affects the reputation of the server and the mail domain that everyone shares. It forms part of our Terms of Service.

1. The short version

Don't send unsolicited email. Don't host anything illegal or that harms other people. Don't use the service to attack, scan or overload anything. Keep your sites patched. Answer abuse reports within 48 hours. That's most of it.

2. Email

• No unsolicited bulk email. Every recipient of marketing mail must have opted in, and every message must have a working unsubscribe. "I bought a list" is not consent.
• Mailboxes are for human correspondence and normal business mail. Transactional mail from your own site — order confirmations, password resets — is fine. Bulk sending, newsletters to large lists and automated campaigns should go through a dedicated sending service, and we'll help you set one up.
• Sending limits apply per mailbox and per domain. We'll tell you what they are at onboarding. Hitting them repeatedly is a conversation, not a suspension — but it is a conversation.
• If your domain or an address on it gets blacklisted because of something sent from it, cleaning that up is billable work at the standard hourly rate, and we may pause sending from the domain until it's resolved.

3. Content

You may not host, store or transmit content that is unlawful under Slovak or EU law or the law where it's accessed, including: material that infringes copyright or trade marks; malware, phishing pages or credential-harvesting forms; child sexual abuse material (reported to the authorities immediately, no exceptions); content that incites violence or hatred; and content that violates another person's privacy. You're responsible for the content on your account whether you put it there or someone else did.

Adult content, gambling and cryptocurrency services aren't prohibited outright but need to be agreed with us in writing before onboarding, because they carry regulatory and payment-processor obligations we need to plan for.

4. Security and conduct

• Keep your sites and their software patched. An unpatched WordPress install is the most common way an account gets compromised, and a compromised account affects everyone. We'll warn you about known-vulnerable software on your account; if it isn't updated within a reasonable time and is being actively exploited, we may disable it.
• No port scanning, vulnerability scanning or penetration testing of anything you don't own, including our infrastructure, without written agreement.
• No proxies, VPN endpoints, Tor relays, or anonymising services.
• No cryptocurrency mining and no workloads whose purpose is to consume compute rather than serve your users.
• Don't share your login with people who shouldn't have it, and tell us straight away if you think it's been compromised.

5. Fair use of resources

Each site runs in its own container with its own resource limits, which protects your neighbours from you and you from them. Within those limits, use what you've paid for. If a site consistently runs at its limits, we'll talk to you about whether it needs a bigger plan or some optimisation — usually it's the second. Scheduled tasks should run no more often than every 15 minutes unless agreed.

6. Abuse reports and what happens

If we receive an abuse report about your account — a spam complaint, a copyright notice, a malware alert — we'll forward it to you and expect a response within 48 hours. Most reports are resolved by a reply and a fix.

If something on your account is actively harming others right now — sending spam, serving malware, participating in an attack — we may suspend the affected site or mailbox immediately and tell you straight afterwards. We'll restore it as soon as the problem is fixed. We'd rather suspend one site for an hour than have the whole server blacklisted.

Repeated or serious breaches may lead to termination under the Terms of Service.

7. Our side of it

We won't read your mail or your site's data except where needed to provide support you've asked for, to investigate an abuse report, or where the law requires. We'll always tell you what we did and why. If we have to act on your account, we'll explain it in plain language, not a template.

8. Questions

If you're not sure whether something is allowed, ask first: hello@nlh.sk. The answer is usually yes with a caveat, and it's a much better conversation before than after.