Acceptable Use Policy

You will not use Obiquity, and will not allow others to use your domains or routes, to:

• distribute malware, ransomware, exploit kits, credential stealers, or other harmful software, whether labeled as a container image or not;
• phish, harvest credentials, or impersonate another person, project, company, or registry (including typosquatting hostnames or image names that mimic well-known brands);
• host or facilitate illegal content, including child sexual abuse material or content that violates export controls or sanctions;
• obtain or attempt to obtain TLS certificates for hostnames you do not own or are not authorized to use;
• attack, scan, or overload Obiquity, other tenants, Let's Encrypt, or upstream registries via the service;
• circumvent quotas, DNS verification, suspension, or certificate-issuance gates;
• resell Obiquity as an unmarked white-label, or represent that you are selling Docker Hub, Quay, GHCR, or another registry's pull quota;
• imply that Obiquity or any upstream registry endorses, partners with, or is affiliated with you, unless that party has said so in writing.

DNS verification proves control of a hostname at a point in time; it is not permission to abuse it. Certificates for verified customer hostnames are issued through Obiquity's infrastructure (currently Caddy on-demand TLS and Let's Encrypt). Abuse on those names can damage Obiquity's IP and hosting reputation, not only yours. We may refuse certificates, disable a hostname, or suspend the tenant to protect that infrastructure.

You must comply with the terms of every upstream you route to. Obiquity is a redirect; it does not grant extra rights to Docker Hub, Quay, GHCR, Artifact Registry, ECR Public, or any other registry, and it does not pool or resell their anonymous or authenticated pull limits.

We may, without prior notice:

• suspend a tenant (all of that account's domains stop redirecting);
• delete a domain or route named in a report;
• disable new signups site-wide if there is an abuse spike;
• preserve logs needed to investigate;
• report activity to upstream registries, certificate authorities, or law enforcement.

Repeat or severe violations, including a pattern of copyright infringement, can result in termination. Operators record a reason in the admin audit log when they suspend or delete for AUP or legal causes.

Use the abuse reporting page or email abuse@obiquity.io. Copyright claims belong on the copyright page, not this mailbox.