goga.host

Acceptable Use Policy

Last updated: June 10, 2026

TL;DR: we sell privacy, not impunity. Run almost anything - we don't look inside your server. The line: things that get networks blacklisted, hurt other customers, or are plainly criminal.

Allowed - explicitly

  • VPNs, proxies and Tor relays (non-exit), for you or your users
  • Self-hosted apps, mail for your own domains, game servers
  • Bots and scrapers that respect robots.txt and rate limits
  • Crypto nodes and wallets (not mining - see the banned list)
  • Anything lawful you'd rather not run under your real name. That's the point of the product.

Not allowed - ever

  • Child sexual abuse material. Instant termination, no refund, reported where the law requires
  • Attacks: DDoS, botnet C2, port-scan sweeps, brute-forcing, exploit hosting
  • Spam: bulk unsolicited mail, snowshoe sending, spamvertised sites
  • Phishing & malware: credential pages, droppers, carding shops
  • Tor exit nodes, open resolvers/relays - they poison the IP reputation every neighbour shares
  • Crypto mining - CPU-steal from every other tenant
  • Anything creating legal liability for us in the EU / Netherlands (where the hardware lives)

How we enforce it

We don't inspect your disk or traffic content. Enforcement is triggered by network metadata (flow patterns, abuse-feed listings, port behaviour) and abuse reports from third parties. Response depends on severity:

CRITICAL CSAM, active attacks → immediate suspension, then investigation
SERIOUS spam runs, malware hosting → one warning, 24h to respond, then suspension
GREY AREA noisy scraping, abuse-feed listing → we email first and work it out like adults

Suspended servers keep their data for the grace period in the Terms. Termination for AUP violations forfeits remaining balance for the affected service.

Seeing abuse from our network? Mail [email protected] with logs and timestamps. A human reads it - usually the same day.