Acceptable Use Policy

> **Draft for legal review.** Part of the [Terms of Service](/docs/en/terms). Zaryn hosts code, models, datasets, packages and container images for everyone. To keep it safe, **don't use Zaryn to**: - **Distribute malware** or run a supply-chain attack: packages, images or repositories built to harm the people who install or run them, credential stealers, ransomware, or typosquatting well-known names. Security research is welcome when it is clearly labelled, doesn't harm anyone who didn't opt in, and exploit code isn't weaponised against live systems. - **Phish or deceive**: pages or content impersonating other people, companies or Zaryn itself, or collecting credentials under false pretences. - **Abuse the infrastructure**: cryptocurrency mining in CI, using Zaryn as a file-sharing, CDN or backup service for content unrelated to software, models or data, attacking or scanning other systems from our network, or getting around rate and plan limits (for example with many accounts). - **Infringe** copyright, trademarks or other rights, or publish datasets or model weights whose licence forbids it. We respond to valid notices under [the DMCA / applicable law]; send them to [abuse email]. - Publish **illegal content**, including child sexual abuse material (reported to the authorities at once), or content that incites violence. - **Create accounts in bulk or by automation**, or keep more than one account per person. Each account is confirmed with its own email address; AI agents and scripts act through a token their person approved, never through accounts of their own. - **Harass**, threaten or dox anyone, or spam through issues, pull requests, messages or stars. - Publish other people's **secrets or personal data** without a lawful basis. ## Reporting Use **Report** on any repository or profile, or write to [abuse email] with links and what you found. Reports are confidential. ## What happens Depending on severity we may: ask you to fix something; hide or take down a repository (it then answers *451 Unavailable For Legal Reasons* with the reason); remove a package version or image; restrict CI; or suspend the account (sign-in stops and its content is hidden). Nothing is deleted at that point: content can be restored after a successful appeal. Illegal content may be preserved and reported where the law requires. ## Appeals If you think we got it wrong, write to [abuse email] from the account's email or with a signed message from its key, and say what you'd like us to reconsider. A different person reviews appeals. *Last updated: [date]*