Acceptable Use Policy
Last updated: 2026-09-02
This policy is part of the Terms of Service and applies to everyone who uses the service. It is short on purpose: creating an endpoint takes one unauthenticated request and the service accepts arbitrary form fields, so the rules that keep it from becoming a relay for anything have to be plain.
What you must not do
You must not use the service to:
- send unsolicited bulk email, or use a form to relay mail to people who did not ask for it;
- run phishing forms, fake login pages, or any form that imitates another business, service or person to make people hand something over;
- carry out credential harvesting — collecting passwords, tokens, payment details or one-time codes, whether openly or under false pretences;
- run fraudulent forms or spam forms: fake giveaways, fake surveys, fake support desks, or anything whose purpose is to deceive whoever fills it in;
- impersonate another person, business or institution, including in the name or reply address of the messages the service sends;
- distribute malware or other malicious content, or link to it from what your form submits;
- collect special categories of personal data — health, biometric, government identifiers and similar — without a lawful basis and appropriate safeguards;
- create endpoints for email addresses you do not control;
- break the law, or help someone else break it, through the service.
What you must not do to the service
- Attack the infrastructure, or try to: denial of service, probing for vulnerabilities you have no permission to probe, or interfering with anyone else's use of it.
- Circumvent security mechanisms — domain locking, spam filtering, the honeypot, the challenge, or the authentication of an account that is not yours.
- Evade rate limits or plan quotas, including by creating endpoints in bulk or spreading one workload across many accounts.
- Consume infrastructure abusively, in a way that degrades the service for other customers.
- Access, or try to access, submissions or accounts that are not yours.
Enforcement
When we learn of a possible violation we may investigate it, and depending on what we find we may suspend an endpoint, remove content, block a feature, terminate the account, or decline to serve the person behind it again. When abuse threatens our ability to deliver email for everyone else, we act immediately and explain afterwards.
Where the law requires it, we cooperate with the competent authorities. We do not hand over customer data because someone asked politely.
Reporting a violation
If you believe the service is being used against this policy, tell us through Report abuse. We aim to acknowledge within 2 business days, and we act faster when delivery for other customers is at risk.
Contact
Write to abuse@honeyforms.dev. We read everything that arrives there.