Acceptable Use Policy

What you may and may not do on our network. Supplements our Terms of Service.

Purpose

Aluy provides VPS (including storage VPS), dedicated servers (our own and resold Hetzner dedicated servers), Hetzner Storage Boxes, and IP/ASN (LIR) services for lawful use. This page lists what we don’t allow and what happens if you break the rules. We may update it; material changes are communicated to customers.

Where we run

• Our own infrastructure (VPS and our own dedicated servers): rented dedicated servers in NL, BG, and FI, with our own IPs and ASN announced on top. Only this AUP, our Terms, and local law apply.
• Hetzner Server Auction: resold Hetzner boxes in Hetzner DE or Hetzner FI data centres, on Hetzner’s network and IPs. Hetzner’s terms and AUP also apply, and Hetzner can force us to suspend or terminate — we comply without refund.
• IP, ASN, and LIR services: governed by RIPE NCC policies and your end-user assignment agreement. Keep your RIPE data accurate.

Your responsibility

You are responsible for everything on your account — including what your own customers do. "I didn’t know what was on there" is not a defence.

What is not allowed

• Anything illegal where you are, where we are, or where the server sits
• Child sexual abuse material, or any sexual or suggestive depiction of minors (real, drawn, AI-generated, anything)
• Non-consensual intimate imagery, deepfake nudes of real people, hidden-camera / upskirt material
• Sexual content involving violence, bestiality, or incest
• Anything produced through coercion or trafficking
• Fraud, scams, phishing, impersonation
• Malware, ransomware, botnet C2, exploit kits
• DDoS (as source, relay, or control), BGP hijacking, IP spoofing, unauthorised scanning of third parties
• Spam, open relays, services whose purpose is to send spam
• Unlicensed gambling, unlicensed financial services, unlicensed pharmaceutical sales
• Terrorism, incitement to violence, hate speech, or other serious crime
• Content that infringes someone else’s copyright, trademark, or related rights without a licence. We act on credible takedown notices

Adult content

Lawful adult content is allowed. We don’t bolt on extra rules — you just need to stay within the law. In practice that means:

• Everyone depicted was a verified adult (18+) at the time of recording, gave consent, and you can prove it on request
• Nothing in the list above (CSAM, simulated minors, non-consensual, violence, bestiality, etc.)
• If your audience is in a country that requires age verification or other youth-protection measures for adult content (e.g. Germany under JMStV, France under Loi SREN, the UK under the Online Safety Act, several U.S. states, and others), you implement what that country requires. We don’t prescribe a specific mechanism and we don’t run an age-verification gateway for you
• Don’t run heavy adult-video streaming on shared VPS plans — size your product accordingly or move to a dedicated server

If we get credible evidence you’re outside the rules, or a regulator / hardware provider / court asks us to act, we suspend or terminate without notice and without refund.

Resource use

Don’t hog shared infrastructure: no crypto mining and no other workload that visibly degrades service for other customers on a shared host without us agreeing it in writing first. Dedicated products can do whatever the hardware can handle. In the rare case a workload slows a shared host down, we may first briefly limit its disk or CPU (see our Fair Use Policy) rather than suspend anything.

Sanctions

You must comply with applicable trade sanctions and export controls (EU and otherwise). No services to or for sanctioned individuals, entities, or territories.

You warrant that you, your owners, and your end users are not sanctioned/listed parties and are not located in a jurisdiction we cannot serve. We do not accept any customer from comprehensively embargoed jurisdictions (currently including, but not limited to, North Korea, Iran, and Syria), and we do not accept business/legal-entity customers from sectorally-sanctioned jurisdictions (currently Russia and Belarus) — private individuals from the latter may use our services unless they are otherwise a restricted party. Registrations and orders that fall under these rules are blocked, and existing accounts that become restricted cannot renew or place new orders until their client data reflects a non-restricted position. Giving false location, customer-type, or identity information to get around this is a serious breach. See the Terms for the full policy.

Enforcement

If you break this AUP we may warn you, throttle or null-route traffic, suspend or terminate the service without refund, delete data, and cooperate with law enforcement when legally required. We don’t have to give notice before acting if there’s an ongoing violation, a risk to others, or a legal obligation to act.

Enforcement actions can mean permanent loss of data; the liability limits in our Terms apply.

Report alleged illegal content via the DSA Art. 16 notice form. Network abuse (spam, malware, phishing) can also go to abuse@aluy.net with timestamps, IPs, and URLs.

Law enforcement, courts, and government authorities: do not use the abuse mailbox. All official requests (preservation, disclosure, subpoenas, warrants, takedown orders) must go to legal@aluy.net. The abuse mailbox is automatically triaged and may not reach our legal team; only legal@aluy.net is monitored as legal correspondence.

Updated 13 October 2026