Acceptable Use Policy

Ghostunnel exists to give people privacy and open access to the internet. This Acceptable Use Policy sets out what you may not do with the Service, and how we handle reports of abuse. It forms part of our General Terms of Service.

1. The general rule

Use Ghostunnel lawfully and in a way that doesn’t harm other people, other networks, or the Service. Traffic from our servers shares IP addresses with every other Ghostunnel user, so abuse by one person can get those addresses blocked for everyone.

2. Prohibited uses

You may not use the Service to:

Illegal and harmful content

• create, access, store or share child sexual abuse material — we report it to the relevant authorities;
• break any law that applies to you or to us, or help someone else to do so;
• harass, threaten, stalk, or incite violence against anyone;
• commit fraud, phishing, identity theft, or other deception for gain.

Attacks and network abuse

• distribute malware, ransomware, or other malicious code;
• launch or take part in denial-of-service attacks;
• scan ports or networks, probe for vulnerabilities, or access systems without permission;
• carry out credential stuffing, brute-force attempts, or account takeovers;
• send spam or unsolicited bulk messages, or run open proxies or relays;
• generate traffic that degrades our servers or networks for other users.

Other people’s rights

• infringe copyright, trademarks, or other intellectual property rights;
• violate other people’s privacy, for example by collecting their personal data without a lawful basis.

The Service itself

• get around the limits of your plan — for example by creating multiple Free accounts, or sharing one account beyond its device limit;
• resell, rent out, or provide the Service to others as part of a commercial offering without our written agreement;
• interfere with, overload, or attempt to gain unauthorised access to our servers, apps, API, or other users’ accounts;
• use the API outside our Developer API Terms.

3. Security research

If you think you’ve found a security vulnerability in Ghostunnel, please tell us at [email protected] and give us reasonable time to fix it before disclosing it. Testing that stays within your own account and doesn’t affect other users or disrupt the Service is welcome.

4. What we may do

To protect the Service and its users, we may, without notice where necessary:

• block or rate-limit traffic to certain ports or destinations that are commonly abused (for example, outbound email on port 25);
• limit or temporarily suspend access from a server or protocol that is being abused;
• suspend or close an account that we can reasonably link to a breach of this policy;
• report illegal activity to the relevant authorities where the law requires it.

We apply these measures proportionately. Where an account is affected and it’s safe to do so, we will tell you why and give you a chance to respond.

5. Reporting abuse

If you see abuse coming from a Ghostunnel IP address, report it to [email protected]. Please include:

• the IP address, and the date, time and time zone of the activity;
• what happened, with relevant logs or headers;
• how we can contact you.

Please note: we don’t keep connection logs, and many users share each server’s IP address. This means we usually can’t tell which user was behind a particular IP address at a particular time. We review every report, and act on the server or network level where that helps, or against an account where the report itself identifies it.

6. Copyright complaints

We don’t host content: Ghostunnel passes traffic between our users and the rest of the internet. If you believe traffic from our network infringed your copyright, send a notice to [email protected] that:

• identifies the copyrighted work and the infringing material or activity;
• gives the IP address, date and time (with time zone) of the activity;
• includes your contact details, and a statement that you believe in good faith that the use isn’t authorised;
• confirms that the information is accurate and that you are the rights holder or authorised to act for them, and is signed (an electronic signature is fine).

For the reasons in section 5, we generally cannot identify or forward notices to an individual user. We do not disclose user information in response to copyright notices except where the law requires it — see our Law Enforcement Requests policy.

7. Changes to this policy

We may update this policy as new kinds of abuse appear. The date at the top shows the latest version. Material changes are announced as described in our General Terms of Service.