Acceptable Use Policy

This Acceptable Use Policy (the "AUP") sets out what you can and can't do with htmldrop. It supplements our Terms of Service; capitalised words used here have the meaning given there. Breaking the AUP is grounds for suspending or terminating your account and removing drops without notice.

htmldrop is a thin layer for publishing static pages — we host whatever you upload. That's a powerful default and we trust it sparingly: anything below is a hard "don't", whether you're on the free tier, paid tier, or an anonymous drop.

1. Illegal content

Don't upload, link to, or otherwise distribute via htmldrop anything that's unlawful where you live, where we operate (United Kingdom), or where the visitor is. Specifically, this includes but isn't limited to:

• Child sexual abuse material (CSAM). We report suspected CSAM to the appropriate authorities (NCA-CEOP and, where applicable, NCMEC) and preserve evidence.
• Content that incites or promotes terrorism, mass violence, or genocide.
• Content that infringes copyright, trademark, or other intellectual property rights you don't own — see §6 Copyright.
• Content that violates export controls or sanctions, including material targeted at sanctioned jurisdictions.
• Personal data of others published without a lawful basis — addresses, phone numbers, banking details, government IDs — particularly when published to harass.

2. Abuse and deception

Don't use htmldrop to harm other people or systems. This includes:

• Phishing — pages designed to capture credentials, payment details, or one-time codes for a service you don't own. Pages that imitate a third-party brand's login screen, sign-in flow, or account-recovery prompt are phishing whether or not they include a visible form. Our automated heuristic catches the obvious cases; the trust & safety team reviews the rest.
• Malware distribution — pages or files that drop, run, or fetch malicious software.
• Scams and fraud — fake stores, fake giveaways, fake crypto/airdrop pages, advance-fee schemes, romance scam material.
• Doxing and harassment — pages built to expose, threaten, or harass a person or group.
• Spam — content whose primary purpose is search ranking, link laundering, or affiliate redirection, particularly when uploaded in bulk from one tenant or IP.

3. System abuse

Don't use htmldrop to attack other systems or our infrastructure:

• Don't run port scans, vulnerability probes, or load tests against hosts you don't own — including ours. See our Security policy for the responsible-disclosure route.
• Don't try to bypass our rate limits, abuse heuristics, or authentication — for instance by automating the anonymous-drop endpoint from rotating IPs or fake browsers.
• Don't try to use htmldrop as a generic file-host or CDN: it's sized for one-page drops, not bundles of arbitrary binaries. We enforce this via the upload-size and storage caps documented on the pricing page.
• Don't operate htmldrop as a one-hop redirect to material that would itself break this AUP.

4. Public gallery

The htmldrop public gallery accepts user-opted drops that meet these rules:

• No content unlawful in the United States, the European Union, or the country in which you reside.
• No CSAM, no content that sexualizes minors, no non-consensual intimate imagery.
• No phishing pages or impersonation of brands, services, or individuals.
• No malware distribution, exploit kits, or pages designed to install software without consent.
• No hate speech, threats, or incitement to violence.

Drops that violate these rules are removed from the gallery and may be quarantined site-wide. Repeat violations from a single account result in account suspension. Reports trigger automated quarantine after 3 phishing/CSAM signals within 24 hours; legitimate drops with low signal are restored on admin review.

5. Adult and high-risk content

Lawful adult content (NSFW) is allowed on Pro and above, but:

• It must be clearly labelled. Cover pages, age gates, or domain naming that signals NSFW to a casual visitor is the bar.
• All depicted persons must be adults (18+) and must have consented to the publication. Non-consensual intimate imagery is illegal in the UK under the Online Safety Act and will be removed without notice.
• It must not be commercial sexual services or anything that would qualify as sexual exploitation.

6. Copyright

If you believe a drop infringes your copyright, send a notice to [email protected] with:

• The URL of the infringing drop (e.g. slug.htmldrop.app or the custom domain).
• A description of the original work and where the authoritative copy lives.
• Your contact details (name, email, postal address).
• A statement that you have a good-faith belief the use isn't authorised, signed (typed name is fine) under penalty of perjury.

We aim to action valid notices within 72 hours. Notices that don't include the items above won't be processed. Repeated infringement is grounds for account termination.

7. Reporting abuse

If a drop on htmldrop is harming you or someone you know, email [email protected] with the URL and one or two sentences on what's wrong. Include screenshots if you can, but please don't send personal data of the victim — we only need enough to find the page. We respond to every report, usually within 24 hours.

Phishing reports get priority. The faster you get one to us, the faster we kill the URL and update the abuse heuristic so the next one fails to land at all.

8. How we enforce

We have three responses, in roughly increasing severity:

• Quarantine — the drop's URL returns a 410 Gone page with a brand-neutral warning. The content stays in storage in case the owner appeals.
• Account suspension — the owner can sign in but can't create or update drops. Existing drops are quarantined.
• Termination — the account is deleted, drops are hard-deleted after a short grace, and the owner's email is blocked from re-signing.

Quarantine is reversible by appeal. Termination for CSAM, doxing, or repeat phishing isn't.

9. Appeals

If you think we got it wrong, reply to the abuse-notice email or write to [email protected] within 14 days. Include the slug, why you think the drop was within the AUP, and (where relevant) any prior context. We re-review with someone who wasn't on the original call. If we still disagree, we'll explain why in writing.

10. Changes

We update this AUP as the threat landscape changes and as we learn from real cases. Material changes get an effective-date bump and a note at the top of this page; non-material clarifications don't. Continued use of htmldrop after a change is acceptance of the new version.

11. Contact

Middle East Software Solutions Limited
Companies House registration: 15913819, England and Wales
Abuse: [email protected]
Legal: [email protected]