The principle
We host what is legal, without judging it. We do not read your data, we do not monitor your traffic, and we do not remove anything because someone dislikes it. What we do not accept is using our network to harm others — and every complaint about that gets a fair, documented process.
Never allowed
These end the service immediately, without a refund:
- Child sexual abuse material, in any form. It is reported to the competent authorities.
- Launching attacks: DDoS, stresser and booter services, exploitation of third-party systems, credential stuffing.
- Distributing malware or operating botnet command-and-control servers.
- Phishing, fraudulent shops, carding and payment fraud.
- Sending spam — email sent to people who did not ask for it — or hosting services advertised by spam.
Allowed, with conditions
- Tor relays and bridges are welcome. Exit relays are allowed with a reduced exit policy, a clear exit notice and a contact who answers complaints.
- VPN and proxy services are allowed. You handle the complaints about your users, and we forward them to you like any other.
- Mass email is allowed for opt-in lists only, with working unsubscribe links, SPF, DKIM and DMARC.
- Security research and scanning of systems you do not own needs the owner’s authorisation, or our agreement beforehand for internet-wide research projects.
- Copyright: notices that meet the legal requirements are forwarded to you under the process below. We do not pretend they do not exist, and we do not remove content without giving you the chance to answer.
Network integrity
- No source-address spoofing, no announcing or using IP addresses that were not assigned to you, no ARP or MAC spoofing.
- No open resolvers or open mail relays that can be abused for amplification or spam.
- No interference with other customers’ servers or with our infrastructure, including IPMI networks.
How we handle complaints
We check the complaint
It must name an IP address we operate, a time with its time zone and evidence we can verify. Incomplete or anonymous-and-unverifiable reports are answered with a request for details.
You get a notice
We forward the complaint to your account email with a deadline: 48 hours in general, 24 hours for phishing, malware and spam. You fix, explain or dispute it.
Proportionate action
If nothing happens by the deadline, we act on the narrowest scope possible — usually one IP address — and tell you what we did and how to restore service.
We act without waiting only when harm is immediate: child sexual abuse material, an attack in progress from your server, a compromise that threatens our network, or a binding order from a competent court or authority. Even then we limit the action to what is needed and tell you as soon as we can.
If you dispute a complaint and we agree with you, nothing happens to your server. If a problem keeps coming back, we may end the service after telling you so in writing.
What we do not do
- We do not scan the contents of your server or inspect your traffic.
- We do not act on complaints we cannot verify.
- We do not hand your details to complainants. They get our answer, not your identity — which we do not have anyway.
- We do not disclose customer data without a valid legal order. Every such request is counted in our transparency report.
Reporting abuse
Send reports to abuse@dedicrypto.com, one incident per email, with:
- the IP address involved and the exact date and time, with time zone;
- the type of abuse and the evidence: log lines, full email headers, URLs, samples;
- for copyright: the work concerned, where it is available and your authority to act for the rights holder.
We acknowledge every complete report. PGP-encrypted reports are welcome — see our key.