This policy describes what you may and may not do with servers, proxies, IP addresses and other services provided by Wickbay. It keeps our network fast and our address ranges off blocklists, which protects every customer. It forms part of our Terms of Service.
Scope
The policy applies to every service you order from us and to everyone who uses those services, including your own customers and users. You are responsible for their use of the services as if it were your own.
Illegal content and activity
You may not use our services to store, transmit or make available content, or to carry out activity, that is illegal in the country where the service is located, in Germany, or in the country you operate from. This includes in particular:
- child sexual abuse material, which we report to the authorities;
- material that infringes copyrights, trademarks or other intellectual property rights;
- phishing pages, fraud, scams and the sale of stolen data or credentials;
- malware, ransomware and command-and-control infrastructure for botnets;
- content that incites violence or hatred against people or groups.
Network abuse
The following is not allowed, whether directed at third parties, other customers or our own infrastructure:
- denial-of-service attacks, including "stress testing" services offered to others;
- port scans, vulnerability scans and brute-force login attempts against systems you are not authorised to test;
- forging packet headers or IP addresses, and using addresses that were not assigned to you;
- operating open relays, open resolvers or open proxies that others can misuse;
- intercepting traffic that is not addressed to your services.
Authorised security testing of your own systems, or of systems whose owner has given you written permission, is fine. Let us know in advance if the test could look like an attack from the outside.
You may only send email to recipients who have asked to receive it, and every marketing message must include a working way to unsubscribe. Sending unsolicited bulk email, using purchased or harvested address lists, and hosting websites advertised through spam are not allowed. Mail servers must be configured so that they cannot be abused by third parties.
Proxies and data collection
Our scrape proxies are intended for lawful data collection, such as price monitoring, search engine rank tracking and market research. When collecting data you must:
- keep request rates at a level that does not impair the target website;
- respect access restrictions, including robots.txt and the terms of the website where they are legally binding on you;
- not collect personal data unless you have a legal basis to process it;
- not bypass logins, paywalls or other technical protection measures.
Using proxies for account takeover or credential stuffing, ticket or sneaker botting, ad fraud, fake engagement, or any of the activities listed above is not allowed.
Securing your services
You are responsible for the security of the software you run, including keeping it up to date and using strong credentials. If a service is compromised and used for abuse, we may isolate it from the network until the problem has been fixed, even if you were not aware of the compromise.
Reporting abuse
To report abuse originating from our network, email [email protected] or use the abuse form. Please include the IP address involved, the date and time of the activity with its time zone, and logs or headers that show what happened. We investigate every report.
Enforcement
When we become aware of a violation, we will usually contact you first and ask you to resolve it within a reasonable time. For serious violations, or where there is a risk to our network, other customers or third parties, we may suspend the affected service immediately and without notice. Repeated or severe violations can lead to termination of all your services. Where the law requires it, we pass information to the authorities.
Changes to this policy
We may update this policy as our services and the threat landscape change. The current version is always published on this page, with the date of the last update at the top.