Acceptable use policy

This policy exists because we host other people's websites and other people's photographs. It is written to be enforceable without being a licence for us to remove anything we happen to dislike: everything below is either unlawful, dangerous to other customers, or a direct threat to the service.

1. Content that is not allowed

You may not publish, store or distribute through the service any content that:

1. is unlawful under the law of the United Kingdom, or of a country where it is made available;
2. sexually exploits or abuses a child, or depicts a child in a sexualised way. We report such material to the relevant authorities and terminate the account without notice or refund;
3. is an intimate image shared without the consent of the person in it, or was obtained by deception, coercion or surveillance;
4. infringes someone else's copyright, trade mark, database right, moral right, image rights or confidential information;
5. incites violence or terrorism, or promotes a proscribed organisation;
6. harasses, threatens, defames or is intended to cause serious distress to an identifiable person;
7. incites hatred against a group on the basis of a protected characteristic;
8. is a deliberate deception designed to obtain money, credentials or personal data — including phishing pages and imitations of another organisation;
9. contains malware, exploit code or anything designed to damage a visitor's device;
10. offers goods or services whose sale is prohibited or requires a licence you do not hold — controlled drugs, weapons, regulated financial or gambling services.

Adult material. Lawful artistic nude and boudoir photography is a normal part of professional practice and is permitted. Operating a commercial pornography site is not: it carries obligations around age verification that this service is not built to meet. If you are unsure which side of that line your work falls, ask us before you publish rather than after.

2. Conduct that is not allowed

1. Using the service to send unsolicited bulk email, or to host the landing page for one.
2. Attempting to access another customer's account, content or data, or probing for a way to do so. Genuine security research is welcome — see clause 6.
3. Circumventing a limit, a paywall, a gallery release control or a rate limit.
4. Reselling, sub-licensing or white-labelling the service without our written agreement. Building sites for your own clients on your own account is fine and expected; presenting the product as your own is not.
5. Impersonating another person or organisation, or misrepresenting your association with one.
6. Scraping the service, or using an automated tool against it in a way that degrades it for anyone else.

3. Technical limits

1. Do not use the service as a general file host, a content delivery network for another site, a backup target, or a place to store material unrelated to your photography business.
2. Do not use it to store or serve very large files unrelated to a site or a gallery, or to run cryptocurrency mining or distributed computation.
3. Do not hotlink our media endpoints from a site not hosted with us.

4. Fair use of storage and bandwidth

Storage allowances are published on the pricing page and are what they say. Bandwidth is not metered, because metering it would make a successful photograph a liability and because our infrastructure is priced so that it need not be. That is not an invitation to use the service as a video host: if one account's traffic is disproportionate to normal photography use and is affecting others, we will contact you, explain what we are seeing, and agree a way forward before taking any action.

5. What happens if you breach this

1. We may remove or disable access to specific content, suspend an account, or terminate it, proportionate to what has happened.
2. Except where the law or an immediate risk to others requires otherwise, we will contact you first, explain what we have found, and give you a chance to put it right.
3. If we restrict or remove something, you get a statement of reasons — what was affected, on what ground, whether the decision was automated, and how to challenge it. Challenges are reviewed by a person.
4. Termination for a serious breach does not entitle you to a refund. Content is retained for the usual period afterwards unless the law requires otherwise, so you can still export it.

6. Reporting a breach

To report content on Noddable that breaches this policy or the law, use the report content page, which sets out what to include and how quickly we respond. Copyright complaints have their own route, described in the copyright and content notice policy.

To report a security vulnerability, write to security@noddable.com. Testing against your own account, without degrading the service for anyone else and without accessing anyone else's data, will never be treated as a breach of this policy.