Acceptable Use

What you must not do

Do not use anything we host for the following. This list is not exhaustive; if something is obviously abusive it is covered whether or not it appears here.

Illegal content and activity

• Anything unlawful under the law of Kosovo or of the European Union, or of any country where the content is made available.
• Child sexual abuse material. There is no warning, no appeal window and no second chance for this. We suspend immediately and report to the competent authorities.
• Content that infringes someone else's copyright, trade mark, design or other intellectual property.
• Content inciting violence, terrorism, or hatred against people on the basis of a protected characteristic.
• Fraud, phishing, impersonation of a real person or organisation, or fake shops, invoices or payment pages.
• Sale or distribution of goods or services that require a licence you do not hold.

Messaging and marketing

• Unsolicited bulk email or SMS. Under Article 13 of the ePrivacy Directive (2002/58/EC) and the GDPR, electronic marketing to individuals in the EU generally needs prior consent, and every message must offer a working way to opt out and identify the sender.
• Sending to purchased, scraped or rented lists.
• Forged headers, misleading subject lines, or disguising the origin of a message.
• Operating a mail relay open to third parties.

Technical abuse

• Malware, ransomware, spyware, or anything designed to damage or gain unauthorised access to a system.
• Port scanning, brute-force attempts, credential stuffing, or vulnerability scanning against systems you do not own — including ours — without written permission.
• Taking part in or launching denial-of-service attacks.
• Cryptocurrency mining, or any workload whose main purpose is to consume compute.
• Deliberately circumventing quotas, throttles or access controls.
• Consuming so much shared CPU, memory, storage or bandwidth that other customers on the same infrastructure are degraded. We will always talk to you about growth before we take any action — this rule exists for runaway scripts, not for success.

What we need from you

• Keep your credentials confidential, use a unique password, and tell us immediately if you think an account has been compromised.
• Where you control application code or plugins, keep them patched. Where we maintain them under an agreement, that is our job instead.
• Have a lawful basis for any personal data you put into a system we host, and give the people concerned the information they are entitled to. See how the controller/processor split works.
• Respond to abuse reports we forward to you, within the timescales below.
• Do not resell hosting we provide to you unless your contract says you can.

Reporting illegal content to us

Anyone — you do not have to be a customer — can report content we host that they believe is illegal. This is our notice-and-action mechanism, modelled on Article 16 of the EU Digital Services Act (Regulation (EU) 2022/2065).

How to send a notice

Email legal@vargu.digital with "Illegal content" in the subject line. To let us act quickly, include:

• the exact URL or other precise location of the material;
• a clear explanation of why you believe it is illegal, and under which law if you know it;
• your name and email address — except for reports concerning child sexual abuse material or offences against the life or safety of a person, where you may report anonymously;
• a statement that you believe, in good faith, that the information in the notice is accurate and complete.

What we do with it

• We confirm receipt without undue delay, to the address you gave us.
• We assess the notice carefully, objectively and without arbitrary decision-making.
• We tell you our decision and the reasons for it, including whether we used automated means to reach it — we do not — in line with Article 17 of the same Regulation.
• Where we restrict or remove content, we give the customer who published it the same statement of reasons and tell them how to appeal.

A notice that gives enough detail for a diligent provider to identify illegality without a detailed legal examination is treated as giving us actual knowledge of that content.

What happens when something goes wrong

Our strong preference is to fix the problem with you, not to switch you off. The normal sequence is:

1. We contact you by email describing the problem and what needs to change.
2. You get 48 hours to resolve it, or to tell us why you think we have it wrong.
3. We limit the service — for example rate-limiting a script or pausing outbound mail — if the problem continues and is affecting others.
4. We suspend the affected service only where the activity is causing real harm to third parties, to our infrastructure, or to other customers.

Some things skip the queue and are actioned immediately, with notice to you afterwards: child sexual abuse material, active network attacks originating from your service, a live malware distribution, and any order from a competent authority that requires us to act.

We aim to act proportionately: the narrowest measure that stops the harm, for the shortest time. We will not delete your data as a penalty, and suspension does not by itself end your contract.

Appealing a decision

If we restrict, suspend or remove something and you think we got it wrong, reply to the notice we sent or email legal@vargu.digital with "Appeal" in the subject line.

• A person reviews every appeal. Automated systems do not decide appeals, and did not make the original decision either.
• We respond the same working day.
• If we were wrong we reverse the decision promptly and say so.

Appeal rights here are without prejudice to any court or out-of-court dispute settlement route available to you under applicable law.

Requests from authorities

If a competent authority orders us to act against illegal content, or to provide information about a customer, we comply where the order is valid and properly served. Unless the order or the law forbids it, we will tell the affected customer what we received and what we did, so they can exercise their own rights.

We will not hand over customer data on an informal request. Ask us properly, through the proper channel.

Changes to this policy

We update this policy as the services and the law change. For material changes affecting hosted customers we give 30 days' notice, matching our Terms & Conditions.

This policy was last updated on 12 September 2026.