Acceptable use policy

Not allowed on any plan

• Phishing and impersonation. Pages that pretend to be another company, bank, government, or person to trick visitors, including fake login pages and fake payment or delivery notices.
• Credential and payment harvesting. Forms that collect passwords, one-time codes, card numbers, bank details or recovery phrases for anyone other than you, or under false pretences.
• Malware. Viruses, ransomware, cryptominers, exploit kits, or links and downloads designed to install them.
• Illegal content. Anything illegal where you are or where we operate, including child sexual abuse material (which we report to the authorities), terrorist content, and the sale of illegal goods or services.
• Spam and scams. Pages that exist to be sent in unsolicited bulk messages, fake shops, investment or crypto scams, fake giveaways and similar fraud.
• Copyright and trademark infringement. Content you don't have the right to publish, such as pirated books, films, software or someone else's site copied without permission.
• Harassment and private information. Content that threatens or harasses people, or publishes someone's private information (doxxing) or intimate images without consent.
• Abusing the service. Using sites as a file-sharing service for unrelated downloads, hosting content for redirect chains or link cloaking, or trying to get around limits, scans or suspensions.

Not allowed on the free plan

• Adult content. Sexually explicit material is not allowed on free sites. On paid plans it must be legal, consensual, and behind a password.
• Login and payment forms. Free sites that ask visitors for passwords or card details are held for review. If you genuinely need one, upgrade and use a trusted payment or form provider.

How we check content

Every account needs a verified email and passes a human check. Every upload is virus-scanned, links inside pages are checked against Google Safe Browsing, and pages that look like login or payment forms are flagged. Depending on what we find, an upload is rejected, or the site is held offline until a person reviews it.

What happens if a site breaks the rules

1. Hold. The site goes offline while we look at it. If it's a false alarm, we put it back.
2. Takedown. The site is removed and its link stops working.
3. Account suspension. For serious or repeated breaches (phishing, malware, scams) we suspend the whole account and all of its sites, without refund.

We keep an audit log of every hold, takedown and restore. If you think we got it wrong, email [email protected] with the site's link and we'll review it.

How to report a site

Every site we host has a report form at the same address with /_dropsite/report added to the end. For example, for https://example-site.flatpage.page/, open https://example-site.flatpage.page/_dropsite/report. Free sites also show a Report link in their badge. Choose a reason (phishing, malware, spam, illegal content, copyright, or other) and add any details.

When three different people report the same site, it goes offline automatically until we review it. We don't share who reported a site with its owner.

For urgent reports, copyright notices, or anything the form doesn't cover, email [email protected] with the link and what's wrong. Copyright notices should identify the work, the infringing link, and how we can reach you.