ACCEPTABLE USE POLICY

1 ABOUT THIS POLICY

1.1 This Acceptable Use Policy (AUP) tells you what you may and may not use our platform for. In it, we, us and our mean PageLove Ltd, a company registered in England and Wales under company number 16755312 with registered office at Pagelove Ltd 275 New North Road Islington # 1593 London,  N1 7AA, and you means anyone who holds an account with us or uses our platform, whether on a free plan or a paid plan.

1.2 This AUP forms part of, and should be read with, our Website and Platform Terms and Conditions at /legal/terms/2026-10-09/ (Terms) and our Privacy Policy at /legal/privacy/2026-10-09/. Words defined in the Terms have the same meaning here — in particular Host, Your Content, End User, Platform and Usage Allowance.

1.3 Breach of this AUP is a material breach of the Terms. Clause 14 explains what we may do about it.

1.4 This AUP applies to everything you put on the Platform and everything you do with it, including the websites and applications you deploy, the files you store, the code we run for you, the requests your Hosts serve, the outbound requests your code makes, the domains you point at us, the traffic you generate, the messages you send, and the way you use our control panel and our application programming interfaces.

1.5 It also applies to anyone who uses your account or your Hosts. You are responsible for them, and for your End Users' use of a Host you operate.

2 OUR CORE RULES

2.1 Do not use the Platform for anything that is illegal, or to host, serve, store, transmit or link to anything that is illegal.

2.2 Do not use the Platform for anything that is likely to cause serious harm to another person, or that is designed to deceive people to their detriment.

2.3 Do not do anything that damages, degrades or endangers the Platform, our infrastructure providers, our other customers, their End Users or our reputation.

2.4 Use a fair share of the resources. The Platform is shared infrastructure, and what you do affects everyone else on it.

2.5 Be honest with us. Tell us who you are, tell us what you are running, and tell us promptly if something has gone wrong.

3 COMPLYING WITH THE LAW THAT APPLIES TO YOU

3.1 You are responsible for complying with all laws that apply to you, to your business, to Your Content and to each of your End Users. Those laws differ from country to country and they are not the same as ours. We cannot advise you on them, and the fact that we allow something on the Platform is not a statement that it is lawful for you to do it.

3.2 Where an activity is lawful in your country and in the countries where your End Users are, and you hold any licence or authorisation required there, we will not object simply because the same activity is restricted somewhere else. We are a UK company, our Terms are governed by the law of England and Wales, and we will in all cases apply the law of England and Wales and the law of any country whose authorities have jurisdiction over us. We will not host anything that is unlawful under either.

3.3 Some categories are prohibited outright wherever you are, because they are unlawful in most places, cause serious harm, or attract abuse that damages the Platform for everyone. Those are in clause 4. Some of them are defined by reference to the law that applies to you; the rest are prohibited whatever your local law says.

3.4 You must not use the Platform if you are a person, or acting for or on behalf of a person, subject to a trade or financial sanction, export control or asset freeze applying in the United Kingdom.

4 CONTENT AND ACTIVITY THAT IS PROHIBITED OUTRIGHT

4.1 You must not use the Platform to host, serve, store, transmit, link to or facilitate any of the following.

1. (a) Illegal goods, services or activity of any kind, or content that facilitates them.
2. (b) Child sexual abuse material, and any content that sexualises, grooms, exploits or endangers children. We report this to the National Crime Agency where we are required to, we remove it without notice, and we close the account.
3. (c) Terrorist content, violent extremism and incitement to violence, and content encouraging or assisting serious self-harm or suicide.
4. (d) Non-consensual intimate images, including images shared without the consent of the person shown and images that have been artificially generated or manipulated to appear intimate.
5. (e) Sexually explicit material that is obscene or unlawful in your country or in the countries where your End Users are. Lawful adult content is dealt with in clause 5, but we may decline to host it or remove it at our reasonable discretion and, if we do, clauses 14.3, 14.4 and 14.5 apply.
6. (f) Hate speech, and content that harasses, bullies, threatens, stalks or unlawfully discriminates against a person or group.
7. (g) Fraud and deception — phishing sites and kits, spoofed or look-alike sites impersonating a real organisation, fake login or payment pages, advance fee fraud, pyramid and Ponzi schemes, “get rich quick” and fake investment schemes, fake invoices, fake delivery or account notices, and fake reviews, testimonials or endorsements presented as genuine.
8. (h) Malware and malicious infrastructure — viruses, worms, trojans, ransomware, spyware, adware, keystroke loggers, cryptojacking scripts, exploit kits, botnet command and control servers, malware droppers or staging servers, and stresser or booter services.
9. (i) Attack tooling and attack traffic — using the Platform to scan, probe, penetrate, overload, flood, mail-bomb or launch a denial-of-service attack against any system, whether ours or anyone else's, or to distribute credential stuffing lists or stolen credentials.
10. (j) Counterfeit and infringing material — counterfeit goods, pirated content, unlicensed streaming or download services, and anything that infringes another person's intellectual property rights or rights of confidence.
11. (k) Unlawful use of personal data — selling or sharing personal data unlawfully, doxxing, publishing another person's personal data without a lawful basis, scraped datasets of personal data, and services for harvesting or appending personal data.
12. (l) Deceptive synthetic media presented as genuine — artificially generated or manipulated audio, image or video content presented as real, and impersonation of any real person or organisation.
13. (m) Unlawful gambling, unlicensed financial services, unlicensed pharmacies and controlled drugs, and the unlicensed sale of firearms, ammunition, explosives or other weapons, or instructions for making them.
14. (n) Content that breaches a court order or that we are required to remove by law, by a court, by a regulator or by a law enforcement agency.
15. (o) Circumventing our controls — anything intended to evade our filtering, monitoring, billing thresholds, usage limits, suspensions or abuse controls.

4.2 These lists are not exhaustive. We may refuse, suspend or remove a Host, or close an account, for any other reason we reasonably consider necessary to protect the Platform, our infrastructure providers, our other customers or the public, provided we do not do so for a reason that would be unlawful discrimination.

5 RESTRICTED CONTENT AND INDUSTRIES

5.1 The following are not prohibited, but they attract higher abuse rates, sector-specific regulation, or both. We do not ask about this when you sign up, so please tell us yourself through customer support at support@pagelove.com. Accounts serving this content are subject to additional scrutiny, may be asked for evidence of licensing or authorisation before or during use, may be subject to resource or traffic limits, and may be refused or suspended at our reasonable discretion.

1. (a) lawful adult content, where it is lawful in your country and in the countries where your End Users are, where you operate effective age assurance, and where you comply with any law applying to it, including the Online Safety Act 2023;
2. (b) gambling, betting, lotteries and casino services, where you are licensed in each jurisdiction you serve;
3. (c) financial products and services, including investment, insurance, consumer credit, high-cost short-term credit, debt advice and credit repair, where you hold any regulatory authorisation required;
4. (d) cryptocurrency, digital assets, blockchain products, exchanges, wallets and trading education — educational and informational content is fine, but promises or implications of guaranteed returns or specific investment outcomes are not;
5. (e) pharmacy, supplements, nutraceuticals, weight-loss products and telehealth services;
6. (f) cannabis and CBD products, where lawful in your country and in the countries where your End Users are, and where you hold any licence required;
7. (g) alcohol, tobacco, vaping and nicotine products;
8. (h) dating, escort, sexual encounter and marriage brokering services, where lawful in your country and in the countries where your End Users are;
9. (i) multi-level marketing, affiliate networks and lead generation;
10. (j) file sharing, file storage, paste and image hosting services open to the public, and URL shorteners, anonymous proxies, VPN endpoints and exit nodes — these attract abuse very quickly and we will want to talk to you about your own abuse controls before you run one at scale;
11. (k) political campaigning and advocacy, where you comply with applicable electoral and data protection law; and
12. (l) services aimed at or likely to be accessed by children, where you comply with the law applying to them.

5.2 We may update the lists in clauses 4 and 5 at any time by publishing a revised AUP, in accordance with the Terms.

6 RUNNING CODE ON THE PLATFORM

6.1 We are not a plain web host. You build your project. We run the code you deploy, including the code that composes and serves your pages when someone requests them. Running your code is the most useful thing we do and it is also the easiest thing to abuse, so this clause matters more than any other in this AUP.

6.2 You are responsible for all code you deploy, for everything it does when we run it, and for every dependency it pulls in. Code we run on your instructions is Your Content. We do not compile, assemble or build your project for you, and we do not check your code before we run it.

What you deploy

6.3 You must not deploy any code, dependency, package or script that you know, or ought reasonably to suspect, is malicious or compromised. If you learn after deploying that something you have deployed is malicious or compromised, tell us at security@pagelove.com and remove it.

Code we run for you

6.4 When we run your code, whether to compose a page or otherwise, you must not:

1. (a) use it as a general-purpose proxy, relay or tunnel for traffic that is not part of serving your own site or application — see clause 7.5;
2. (b) use it to send, or to cause to be sent, unsolicited or high-volume outbound requests to any third party system, including scanning, probing, credential stuffing, scraping at volume, or anything that would amount to an attack if done directly;
3. (c) run workloads whose principal purpose is consuming compute rather than serving your site or application — including mining, model training, media transcoding, bulk scraping, password or hash cracking, or running a general-purpose job queue;
4. (d) deploy code designed to open an inbound listener, to provide interactive shell access, or to persist beyond the work it was invoked to do; or
5. (e) deliberately hold connections open, spawn background work that outlives the request, or otherwise use the runtime in a way it is not designed for in order to obtain resources you have not paid for.

The boundary around your code

6.5 The environment in which we run your code is shared, and it is isolated for a reason. You must not attempt to escape that isolation, or to reach anything outside your own environment. In particular you must not attempt to:

1. (a) break out of, or defeat, any sandbox, container, virtual machine or process boundary;
2. (b) read, alter or interfere with another customer's code, data, secrets, cache entries or traffic;
3. (c) read or exfiltrate our own credentials, internal endpoints, instance metadata, configuration or infrastructure detail; or
4. (d) escalate privileges, or obtain access to any part of the Platform beyond what your plan gives you.

6.6 If you discover that you can do any of these things, that is a security vulnerability and clause 9.3 tells you what we would like you to do about it. We will treat a good-faith report very differently from exploitation.

Secrets

6.7 You may store credentials and secrets that belong to you or that you are authorised to hold. You must not store or process credentials, access tokens, API keys or personal data that you obtained unlawfully, and you must not use the Platform to collect, test, validate or distribute credentials belonging to other people.

7 DOMAINS, DNS AND OUR EDGE NETWORK

7.1 We serve your Hosts through a content delivery network, which means your content is cached and served from locations around the world. That gives you reach, and it also means that anything you do wrong reaches further and faster.

Domains

7.2 Every Host sits on a subdomain of a domain we own. That subdomain is ours, not yours. The Terms explain the licence you have to use it, and when we may reclaim, rename or reallocate it.

7.3 Where we make the feature available, you may point a domain you own at a Host. You must only point at a Host a domain that you own or are authorised to control, and you must keep that authority for as long as it points at us. If you stop controlling a domain, or stop using a Host, remove the DNS records — records left pointing at infrastructure you no longer hold are a well-known route to hijacking, and we may remove or reclaim the corresponding configuration.

7.4 You must not use a domain, subdomain, Host name, page or URL that impersonates another person or organisation, or that is designed to be mistaken for one, whether or not the content behind it is itself unlawful. This applies to the subdomain we give you as much as to a domain of your own, and we may rename or withdraw a subdomain that breaches it.

Using us as cover

7.5 You must not use the Platform, or our edge network, to disguise, front for or launder traffic or content that is hosted somewhere else. In particular you must not:

1. (a) configure a Host as a reverse proxy, mirror or cache in front of an origin server whose content would breach this AUP if it were hosted here;
2. (b) use our domains, certificates or network to disguise the true destination or origin of traffic, including by domain fronting;
3. (c) operate an open relay, an open proxy, an open resolver, a VPN endpoint or an anonymising exit node, or any other service that lets an unauthenticated third party route traffic through our network; or
4. (d) operate redirect chains, link shorteners or gateway pages whose purpose is to move visitors to content that would breach this AUP.

7.6 Nothing here stops you running an ordinary application that calls your own back end, a third party API you are entitled to use, or a service you have contracted with. The line is whether you are serving your own site or application, or renting out our network to somebody else.

The cache

7.7 You must not attempt to poison, corrupt or manipulate our cache, or to cause content to be served to people it was not intended for. You must not deliberately configure caching in a way designed to make content harder for us to identify, review or remove after a report.

7.8 You must not use a Host principally as a file or media store for a site served elsewhere, or allow third party sites to embed or hotlink assets from your Host at a scale that is really their bandwidth consumption rather than yours. Clause 10 applies.

8 HOW YOU MUST USE THE NETWORK

8.1 You must not:

1. (a) use, or try to use, someone else's account without their permission, or create an account using a false identity;
2. (b) tamper with, disable, override or attempt to circumvent any security component, access control, rate limit or billing control of the Platform;
3. (c) scan, probe or test the Platform, or any system belonging to us, our infrastructure providers or our other customers, for vulnerabilities, except in accordance with clause 9;
4. (d) make excessive or abusive use of our application programming interfaces, or automate your use of the Platform in a way that places a disproportionate load on it;
5. (e) remove, hide, obscure, alter or interfere with the “Powered by PageLove” banner on a Host using our free plan, or instruct anyone else to;
6. (f) resell, white-label or otherwise present yourself as the original provider of the Platform, or claim to be associated with or endorsed by us, unless we have agreed it in writing;
7. (g) take any action intended to avoid a free plan limit, a Usage Allowance or a billing threshold, including by creating additional accounts, spreading one workload across multiple free Hosts, or repeatedly deleting and recreating Hosts;
8. (h) use the Platform to mine cryptocurrency, or to run distributed computing or model training workloads, unless we have agreed it in writing; or
9. (i) forge, spoof or falsify any header, address, identifier or routing information, or otherwise disguise the origin of traffic.

9 SECURITY TESTING AND VULNERABILITY DISCLOSURE

9.1 You must not carry out any security testing against the Platform or against a Host, including your own, unless we have authorised it in writing first. To ask for authorisation, email security@pagelove.com at least 5 business days beforehand, telling us what you want to test, the source addresses you will test from and the window you want. We may refuse, and we may impose conditions. If we authorise it, keep within what we have authorised and stop immediately if we ask you to.

9.2 You must not test, scan or attack anything that is not yours, including the underlying Platform, our control plane, our infrastructure providers' systems, or another customer's Hosts.

9.3 If you find a security vulnerability in the Platform, please report it to us at security@pagelove.com and give us a reasonable opportunity to fix it before you tell anyone else. We will not pursue a claim against anyone who reports a vulnerability to us in good faith, in accordance with this clause, and without accessing, altering or exfiltrating anyone's data.

10 RESOURCE USE, FAIR USE AND BEING A GOOD NEIGHBOUR

10.1 Each plan includes a Usage Allowance, published on our Pricing Page. The Terms explain what happens when you reach it — in summary, we tell you, and you can either buy more usage or accept reduced performance or a pause until the next billing period.

10.2 Separately from the Usage Allowance, the Platform is shared infrastructure. You must not use it in a way that:

1. (a) places a disproportionate or abnormal load on it;
2. (b) degrades performance, availability or deliverability for our other customers;
3. (c) is inconsistent with the way the plan you have bought is described on our Pricing Page; or
4. (d) consumes a share of a shared resource — bandwidth, compute, storage, connections, IP reputation — that is unreasonable in the circumstances.

10.3 We monitor the Platform automatically for anomalous traffic and usage patterns. Where that monitoring, or a report, tells us that a workload is doing any of those things, we may, acting reasonably and proportionately, restrict, throttle, isolate or move it, or ask you to move to a different plan or to dedicated capacity.

10.4 Wherever we can, we act at the level of the individual Host rather than your whole account, so that one problem does not take down everything else you run with us.

10.5 Before we do, we will tell you what the problem is and give you a reasonable opportunity to fix it — unless the load is causing, or is about to cause, material harm to the Platform or to our other customers, in which case we may act first and tell you as soon as we reasonably can.

10.6 We are not looking for excuses to move you off a plan. A busy site is not a problem — that is what we are for. This clause is about behaviour that harms the people around you.

10.7 We allocate IP addresses and network capacity at our discretion, and we may move, re-address or re-route your traffic to protect the Platform and its reputation.

11 EMAIL AND OTHER MESSAGES SENT FROM YOUR HOSTS

11.1 We are not an email service provider, and sending bulk email is not what the Platform is for. But applications send mail — sign-up confirmations, password resets, receipts, notifications — and mail sent from our network affects the reputation of the whole network.

11.2 So if you send email, SMS or other messages from or through a Host, you must:

1. (a) only send to people who have asked to hear from you or whom you are otherwise lawfully entitled to contact, and be able to tell us how and when they agreed if we ask;
2. (b) identify yourself accurately in the sender name, address, subject line and headers, and never forge or disguise them;
3. (c) include a working unsubscribe mechanism in every marketing message and honour opt-outs promptly; and
4. (d) comply with the direct marketing and data protection law that applies to you and to each recipient, which may include the UK’s Privacy and Electronic Communications Regulations, the EU rules, the CAN-SPAM Act in the United States, Canada’s Anti-Spam Legislation and the Spam Act 2003 in Australia.

11.3 You must not use the Platform to send unsolicited bulk messages, and you must not use it to support a spam or phishing operation run elsewhere — for example by hosting the landing page, the unsubscribe page, the tracking pixel, the image assets or the redirect for a campaign sent from somewhere else. That is a common pattern and we treat it as seriously as sending the mail ourselves.

11.4 If you intend to send mail in volume, use a dedicated provider and authenticate your sending domain properly. We may ask you to publish SPF, DKIM and DMARC records, may require you to route bulk mail off-platform, and may throttle, suspend or block outbound messaging from a Host where its complaint rate, bounce rate or sending pattern is harming the reputation of our network or our IP ranges. That is a reputation measure and clause 10.5 applies to it.

12 YOUR RESPONSIBILITIES TO YOUR END USERS

12.1 If a Host you operate collects personal data from End Users, you must publish your own privacy notice and cookie notice, actively bring them to your End Users' attention at or before the time you collect their details, and obtain any consent their local law requires, including for cookies and similar technologies and for tracking.

12.2 Your notice must say that you use us to host the site, that we and our sub-processors process personal data on your behalf, and that we record request logs as a controller in our own right. Our sub-processor list at [insert Sub-processor List URL] gives you the information you need for that, and we keep it up to date.

12.3 You are the controller of the personal data inside a Host you operate, and we are your processor for it. We are a separate controller of the request logs we generate when we serve your Host, including your End Users' IP addresses, which we use to deliver the page, to keep the Platform secure and to meter usage. The Terms and our Privacy Policy explain the split.

12.4 If a Host you operate is likely to be accessed by children, or is subject to the Online Safety Act 2023 or an equivalent regime elsewhere, complying with that regime is your responsibility, not ours. That includes any risk assessment, age assurance, reporting route, complaints procedure and record-keeping it requires.

13 REPORTING ABUSE AND ILLEGAL CONTENT

13.1 If you believe anyone is breaching this AUP, or that content hosted on or served through the Platform is illegal or infringes your rights, please tell us at abuse@pagelove.com. Anyone may report to us. You do not need to hold an account with us, and you do not need to use the Platform.

13.2 To help us act quickly, please tell us:

1. (a) why you think the content is illegal or in breach of this AUP;
2. (b) the exact location of the content — the full URL, and any other identifier you have;
3. (c) your name and an email address at which we can reach you, unless your report concerns child sexual abuse material, in which case you may report anonymously;
4. (d) if you are reporting an infringement of your own rights, what right you hold and how we can verify it; and
5. (e) a statement confirming that you believe in good faith that the information in your report is accurate and complete.

13.3 We will acknowledge your report without undue delay, deal with it in a timely, diligent, non-arbitrary and objective way, and tell you the outcome and whether we used automated means in handling it.

13.4 We do not review content before it is served, and we do not carry out general monitoring. We do monitor the Platform automatically for security, abuse and resource purposes, which sometimes tells us that something is worth looking at. Where we obtain actual knowledge that something is unlawful, we act expeditiously to remove it or disable access to it.

13.5 Please do not use the abuse address for support questions or billing queries — use support@pagelove.com for those, so that we can keep the abuse queue fast.

14 WHAT WE DO ABOUT BREACHES

14.1 Failure to comply with this AUP is a material breach of the Terms. Where you breach it, or we reasonably suspect that you have, we may do any or all of the following:

1. (a) ask you what is going on, or ask you for evidence of permission, licensing or authorisation;
2. (b) issue a warning and give you a period in which to put it right;
3. (c) throttle, rate-limit or isolate a single Host or a workload, in preference to acting against your whole account;
4. (d) remove, or disable access to, particular content;
5. (e) suspend a Host or your account, temporarily or permanently;
6. (f) close your account and end your contract with us;
7. (g) where you are not a Consumer, recover from you the costs we incur as a result of the breach, including reasonable administrative and legal costs;
8. (h) take other legal action against you; and
9. (i) disclose relevant information to law enforcement authorities, regulators, infrastructure providers, mailbox providers or anti-abuse organisations, where we reasonably consider it necessary or where the law requires it.

14.2 We will act proportionately. Where the problem can be put right and there is no immediate risk, we will tell you what it is and give you a reasonable opportunity to fix it before we suspend or remove anything. Where the breach is serious, cannot be put right, or the law or an immediate risk requires us to act at once, we may act without prior notice and tell you as soon as we reasonably can.

14.3 Whenever we restrict, remove or suspend, we will give you a statement of our reasons, the facts we relied on, whether automated means were used, and how you can challenge the decision, at the latest when the restriction takes effect. We may withhold detail where giving it would be unlawful, would prejudice an investigation, would help others evade our abuse controls, or would disclose someone else's confidential information.

14.4 You may challenge any decision by emailing abuse@pagelove.com within 30 days. A person who was not involved in the original decision will review it and we will tell you the outcome. If we find we were wrong, we will restore the content or the Host.

14.5 The Terms explain when a fee is and is not refunded following a suspension or closure, and what happens to Your Content afterwards. In summary: where the breach was deliberate, fraudulent or seriously prejudicial, we do not refund; otherwise we refund the unexpired part of the period you have paid for.

14.6 Any liability we may have for action taken under this AUP is subject to the liability clause of the Terms. Nothing in this AUP limits our rights under the Terms or at law.

14.7 If your account is suspended or closed for breaching this AUP, you must not create a new account to get around it. We may suspend or close any account we reasonably believe is connected to you.

14.8 We take a firmer line where the free plan is being used as disposable infrastructure — for example creating Hosts in volume for phishing, redirects, malware staging or throwaway spam landing pages. In those cases we will normally remove the Hosts and close the account without notice, and clause 14.4 is your route to challenge that.

15 CHANGES TO THIS POLICY

15.1 We may update this AUP from time to time to reflect changes in the law, in the Platform, or in the abuse we see. We will publish the updated version at /legal/acceptable-use/2026-10-09/ and, where the change is significant, we will tell you by email or by notice in the control panel at least 30 days before it takes effect. The date at the top tells you when it was last updated.

15.2 If you are a Consumer and a material change is to your disadvantage, the Terms give you the right to end your paid plan before it takes effect and to a proportionate refund.

16 HOW TO CONTACT US

16.1 These addresses are monitored by our team and not only by automated tools. We deal with correspondence in English.

16.2 We offer our services in the European Union. Our legal representative in the Union under Article 13 of the Digital Services Act, and our points of contact for recipients of the service and for the authorities, are set out in the Terms.

Thanks for helping us keep the platform fast, clean and safe for everyone on it.