Acceptable use policy
English and Romanian are the original versions; the versions in other languages are translations provided for convenience, and if they differ, the English version prevails.
Version 2026-10-20.
This policy is part of the Terms and applies to every hosting account of Casapu Cristian-Costinel Întreprindere Individuală (MediaLab Works, "we"), to everything stored or run in it (websites, applications, databases, mailboxes, files) and to everyone the customer lets use it. The customer is responsible for the content and for the people they give access to.
1. Prohibited content and activities
You may not use the hosting, directly or through your users, to:
- Spam: send unsolicited bulk or commercial e-mail, run mailing lists without a documented opt-in, send through open relays or forged headers, or host websites advertised by spam.
- Phishing and fraud: imitate banks, shops, authorities or other services to obtain passwords, card data or money; host scams, fake shops or pyramid schemes.
- Malware: host or spread viruses, ransomware, trojans, exploit kits, botnet control servers or phishing kits, or knowingly keep a compromised site online after we warn you.
- Attacks: scan, probe or attack other systems (including ours), run denial-of-service attacks, crack passwords, or try to bypass the isolation, limits or security of the server.
- Illegal content: content that is illegal in Romania or in the EU, including child sexual abuse material (reported immediately to the authorities), terrorist content, incitement to violence or hatred, the sale of illegal goods or services, and content that infringes copyright, trademarks or other rights of others (pirated software, films, music or books).
- Personal data abuse: collect or publish personal data without a legal basis, or host doxxing or stalkerware.
- Cryptocurrency mining, proof-of-work or proof-of-space computing, and similar uses that keep the CPU or disk busy permanently.
- Unsuitable services: public proxies or VPN exit nodes, Tor exit nodes, file-sharing trackers, mirrors of large download archives, video streaming to the public or backups of other servers. Hosting is meant for websites, web applications and e-mail.
2. Resources and fair use
- Every plan has CPU, memory, process, disk and file (inode) limits, enforced technically. Your sites run inside them; using your plan's resources fully is allowed.
- "Unlimited" on Business (websites, databases, mailboxes) means fair use: the plan's CPU, memory and disk still apply, and there are technical caps (currently 50 websites, 100 databases and 500 mailboxes per account) meant only to stop abuse. If you need more, write to us.
- Over the disk or files limit you receive an e-mail and have 7 days to free up space or add disk; after that, uploads are blocked until you are back under the limit (your sites keep running).
- An account that degrades the server for others (for example constant heavy disk activity, huge numbers of files or connections) may be limited or asked to move to a larger plan.
3. E-mail
- Outgoing port 25 is blocked from all hosting accounts. Your sites send e-mail through our mail server with one of your mailboxes (SMTP submission, port 587), so every message is authenticated and signed (SPF, DKIM).
- Mailboxes are for people and for your sites' transactional e-mail (confirmations, password resets, notifications). Newsletters are allowed only to subscribers who opted in, with a working unsubscribe link and low complaint rates.
- We may limit the sending rate of a mailbox or block it when it sends spam, for example after its password was stolen.
4. Security
- Keep your applications, plugins and themes up to date and use strong, unique passwords. A site that was hacked must be cleaned or restored from a backup before it goes back online.
- Do not store passwords, keys or backups in the public web folder.
- Do not share your SFTP or SSH access with people you do not trust; you are responsible for what is done with it.
5. What we do in case of a breach
Depending on how serious the breach is, we may: warn you and ask you to fix it within a deadline; temporarily disable a website, a mailbox or a feature (for example sending e-mail); block uploads; or suspend the account. For illegal content, phishing, malware, spam campaigns, attacks or activity that endangers the server or other customers, we may act immediately, without prior notice, and we tell you afterwards. We restrict only what is necessary, and we restore access once the problem is fixed. Repeated or very serious breaches may lead to the termination of the account under the Terms. We cooperate with the competent authorities when the law requires it.
6. Reporting illegal content (notice and action)
Anyone can report content hosted with us that they believe is illegal or breaches this policy. Write to abuse@medialab.works (a person reads it), with:
- the exact address (URL) of the content, or for e-mail the full message with its headers;
- why you think the content is illegal or breaches this policy;
- your name and e-mail address (except for reports about child sexual abuse material, which can be anonymous);
- a statement that you believe in good faith that the information in the report is accurate and complete.
We confirm receipt, review the report diligently and objectively, and tell you what we decided and whether automated means were used (they are not: every report is reviewed by a person). Reports of copyright infringement should identify the work and the right holder.
Statement of reasons. When we remove or disable content, suspend a service or an account because of illegal content or a breach of this policy, we tell the customer concerned the decision, the facts and the legal or contractual grounds for it, whether it was based on a notice, and how to contest it, unless the law or an authority forbids us to (for example during a criminal investigation).
Contesting a decision. The customer, and the person who sent the notice, can contest our decision within 6 months by writing to abuse@medialab.works; a person reviews it and we reply with the outcome. Consumers keep their right to go to court and the other remedies described in the Terms.
Suspicion of a criminal offence. If content gives us reason to suspect a criminal offence that threatens the life or safety of persons, we inform the competent authorities in Romania.
7. Points of contact
- Abuse reports and notices (also for users): abuse@medialab.works.
- Authorities, the European Commission and the European Board for Digital Services (Regulation (EU) 2022/2065, art. 11): abuse@medialab.works, in English or Romanian.
- Customers: contact@medialab.works or a ticket from your account.
We are a micro-enterprise, so the transparency-reporting obligations of the Digital Services Act for larger providers do not apply to us; we still publish here how we handle notices.