Acceptable Use
& Abuse

1. The short version

Kemnir gives a machine you own a public address without opening a port. That is useful to people hosting a game for friends, and it is equally useful to people doing something they shouldn't. We would rather lose the second group than pretend we can't tell the difference.

2. Prohibited uses

You may not use Kemnir to:

• Host phishing — pages impersonating a person, brand, or service to collect credentials or payment details
• Distribute malware, or operate command-and-control infrastructure for it
• Launch attacks — denial of service, brute-force, credential stuffing, or unauthorised scanning of anyone else's systems
• Send spam, or relay bulk unsolicited messaging of any kind
• Host child sexual abuse material. There is no threshold, no warning, and no appeal on this one: the tunnel is terminated and the matter is reported to the appropriate authorities
• Distribute content you have no right to distribute
• Evade a ban, a block, or a sanction — including using Kemnir to disguise the origin of traffic another operator has already refused
• Break the law where you are, where your users are, or where our infrastructure sits

We also expect you to run tunnels only for machines and services you're actually authorised to expose, and to stay within the bandwidth and tunnel limits of your plan rather than working around them.

3. Reporting abuse

Email abuse@kemnir.com. To let us act quickly, include:

• The hostname or IP and port involved
• Timestamps with a timezone — without these we often can't match a report to a connection
• What happened, and any evidence you can share (logs, headers, screenshots)
• How to reach you if we need to ask something

We aim to acknowledge reports within one business day and to act on clear-cut cases faster than that. Reports involving CSAM or an active attack are handled immediately and out of order.

We don't share the reporter's identity with the account being reported unless we're legally required to.

4. What we can and can't do

We can disable a tunnel, suspend a hostname, remove a custom domain, rate-limit or terminate an account, and preserve the connection metadata relevant to a report.

We can't edit or remove what's on somebody's machine — we're the road, not the building. If the underlying content also lives somewhere else, the hosting provider is the more effective place to report it. And because we don't inspect traffic contents, we generally can't confirm a content-based allegation from our side; we act on what you can evidence plus what the metadata supports.

5. What we do proactively

• Protocol validation. A game tunnel only accepts connections whose first packet is a valid handshake for that game. Traffic that isn't gets dropped at the edge, which removes a large share of opportunistic abuse before it reaches anyone.
• Custom domain verification. A domain must be proven with a DNS record before we'll serve it, and we re-check on a schedule — domains expire and get resold, and we're not going to keep routing for a hostname that changed hands last month.
• Port restrictions. Ports associated with mail relaying and other high-abuse services are not available for tunnels.
• A kill switch. We can cut a tunnel at the edge without waiting for a control-plane deploy.

6. Consequences

Depending on severity and history, we may warn you, suspend the tunnel, suspend the account, or terminate outright. Serious cases — CSAM, active attacks, and fraud — skip straight to termination and are reported to the relevant authorities. We don't refund service terminated for abuse.

If you believe we've got it wrong, reply to the notice we send you. We would rather reinstate a wrongly suspended customer than defend a bad call.

7. Law enforcement

Requests should go to legal@kemnir.com and should identify the hostname or IP and the time window in question. We respond to valid legal process. Two things are worth knowing before you ask: we hold connection metadata only, not traffic contents, and that metadata is retained for 30 days — see the Privacy Policy. Emergency requests involving a risk to life are handled immediately.

8. Contact

Kemit Security LLC, Wyoming, USA.
Abuse reports: abuse@kemnir.com
Legal process: legal@kemnir.com
Privacy: privacy@kemnir.com