Acceptable use policy

Version 2026-10-09.1 · effective 9 October 2026

What you may not do with AnonyVPN, what our servers enforce on their own, and what happens when a rule is broken. This policy is part of the terms of use.

1. What is not allowed

When you use AnonyVPN, do not:

• break the law that applies to you or to us;
• send spam or other unsolicited bulk messages. Outgoing connections to port 25 (server-to-server mail) are always blocked, and connections to the mail-submission ports 465 and 587 are limited per device; normal use of a mail app is not affected;
• scan networks or ports, probe systems for weaknesses, or try passwords against other people's logins;
• attack systems or networks: denial of service, flooding, exploiting vulnerabilities, spreading malware, running botnets, phishing;
• commit fraud, or take over or misuse other people's accounts or payment details;
• create, share or access child sexual abuse material, or any other illegal content;
• harass, threaten, stalk or harm others, or infringe their rights, including copyright;
• attack AnonyVPN or its servers, get around its limits or restrictions (for example by adding new devices to escape a restriction), resell access, or share one device's configuration between many people.

2. What our servers enforce automatically

• Port 25 is blocked; traffic between users and to private networks is blocked; nobody can connect in to your device through AnonyVPN.
• Each device has limits on how fast it opens new connections, how many it keeps open, and how often it connects to mail-submission ports. Signs of port scanning are noticed by counting the destination ports a device contacts in a short time — never by recording which addresses.
• We do not publish the exact limits. They are meant to leave normal use alone.
• These checks run in the server's memory; what they keep, and for how long, is in the privacy notice (sections 4 and 7).

3. What happens when a limit or this policy is broken

1. Automatic restriction. A device that keeps going over the limits is restricted for a while (currently 1 hour, then 24 hours if it happens again within a day). It stays connected, but slower and with fewer connections; it may be limited to web traffic. The Devices page shows it, for example: “Restricted until 15:10 — unusual connection activity”.
2. Account restriction. Adding many devices in one day, or several restricted devices, restricts the whole account (currently for 24 hours). Removing a restricted device moves its restriction to the account.
3. Suspension. For serious or repeated breaches, or when an abuse report matches a device our limits flagged at that time, our staff may restrict or suspend a device or an account — with or without an end date — or remove a device. A suspended device is taken off every server.
4. Server measures. We may block a destination port on a server for a period, or take a server out of service.

See also: terms of use (section 10) and Reporting abuse.

Changes to this page

• Version 2026-10-09.1: First version (the rules were a short list in the draft terms).