Acceptable Use Policy

Last updated: July 17, 2026

smol machines gives you real, isolated virtual machines with real network access. That freedom works only if everyone stays inside these lines. This policy is part of the Terms of Service; violating it can get machines stopped or accounts suspended — immediately and without notice where the platform or third parties are at risk.

Don't use the service to harm others

  • No unauthorized access, penetration testing, or vulnerability scanning of systems you do not own or lack written permission to test. Testing systems you are authorized to test is fine.
  • No denial-of-service attacks, traffic flooding, or knowingly participating in botnets.
  • No malware distribution, command-and-control infrastructure, or phishing.
  • No spam — email, SMS, comment, or otherwise — and no operating open relays or open resolvers.
  • No scraping that violates a target's terms or overwhelms it with traffic.

Don't run illegal or prohibited content

  • Nothing that is illegal where you are, where we operate, or under U.S. law — including CSAM (zero tolerance, reported to authorities), trafficking in stolen data or credentials, and violations of export controls or sanctions.
  • No content that infringes others' intellectual property.

Don't abuse the platform

  • No cryptocurrency mining or similar sustained compute farming (proof-of-work, bandwidth-selling networks, etc.). We detect this and suspend for it.
  • No attempts to escape machine isolation, access other tenants' machines or data, or probe the platform's own control plane, hosts, or metadata services.
  • No circumventing metering, quotas, rate limits, or billing — including creating accounts to farm free-tier allowances.
  • No reselling the service or offering it to third parties as your own infrastructure without our written agreement.
  • Report security vulnerabilities to [email protected] instead of exploiting them — good-faith research disclosed responsibly is welcome.

Public URLs and share links

Apps you publish through public URLs or anonymous share links are your responsibility, and all of the rules above apply to what those apps do and serve. Revoke share links you no longer need.

Enforcement

We prefer to warn first when the risk allows it, and we may stop specific machines rather than whole accounts where that contains the problem. Repeated or egregious violations end accounts. If you believe we got it wrong, reply to the enforcement notice or write to [email protected].