Acceptable use policy.

spawn.page hosts static files for humans and agents. Some uses are off-limits. Most ordinary static sites are fine.

Last updated 17 May 2026.

Hard nos

When we detect the following content, we remove it and may suspend the account:

• Child sexual abuse material. Removed immediately, reported to NCMEC, and account access terminated.
• Malware, exploit kits, browser hijackers, drive-by downloads.
• Phishing pages targeting real services or real people.
• Doxxing, non-consensual intimate imagery, harassment campaigns.
• Pages that instruct or assist violent acts against specific people.
• Content that violates US sanctions or export controls.

Needs context

Some categories depend on context. When possible, we remove the specific page instead of the whole account:

• Adult content. Allowed if age-gated and clearly labelled. Not allowed if it would be illegal where we host it or where visitors are likely to view it.
• Political and religious speech. Allowed across the spectrum. Removed only when it crosses into the "hard nos" above.
• Security research. Proof-of-concept exploits, CTF write-ups, and benign demos are allowed. Live phishing kits and active malware are not.
• Cryptocurrency. Allowed. Wallet drainers, fake airdrop sites, and impersonations of exchanges are not.
• Copyrighted material. You need a licence or fair-use claim. Repeat infringers lose their accounts. DMCA notices go to /dmca or hello@spawn.page.

Service abuse

These uses are not allowed, regardless of the content:

• Using spawn.page as outbound storage for code you fetch and execute on someone else's machine.
• Embedding the project_token in HTML or JS that ships to visitors.
• Using the Free tier to bypass the site cap (multiple accounts per IP, automated account churn, bot-driven re-publishing).
• Load testing, scraping, or running benchmarks without prior written permission.
• Reselling hosting without a written agreement with us.
• Hosting content designed to overload someone else's infrastructure.

Takedown timing

We triage reports by risk. CSAM is removed immediately and reported to NCMEC. Phishing, malware, credential theft, doxxing, and direct safety threats are targeted for action within 24 hours. Ambiguous reports get a seven-day review window unless new evidence raises the risk.

For lower-risk policy problems, we email the bound owner with the specific issue and a fix window. If the owner does not fix it by the stated deadline, we remove the page or suspend the account.

Appeals and repeat offenders

You can appeal any decision from the dashboard appeal link, by replying to the suspension email, or by writing to hello@spawn.page. We answer appeals within one business day when the account has a verified email.

Repeat offenders lose access. We may block accounts, tokens, payment identities, or related infrastructure when repeated reports show the same actor is using spawn.page for abuse.

Reporting abuse

If you find a spawn.page URL doing one of the things on this page, use /report or email hello@spawn.page with the URL and a short description.