Acceptable use and reports

This page states what may not be done on Bastide, how to report illegal content hosted by the platform, and what happens when a project is frozen for abuse: what the freeze stops, what it keeps, and how to contest it. It summarises the acceptable use policy, which is part of the contract.

What is forbidden

The policy applies to projects, to agents acting with your tokens and to the content served.

1. Crypto-asset mining: running, directly or through a hidden process, a mining or proof-of-work program.
2. Phishing and malware: phishing pages, malware, command-and-control servers, intrusion tools used against third parties.
3. Unsolicited bulk sending: emails, SMS or notifications sent in bulk without consent, or to purchased lists.
4. Quota circumvention: multiplying accounts, projects or trials to escape quotas, rate limits or payment; reselling access outside the reseller agreement.
5. Illegal content: child sexual abuse material, incitement to or glorification of terrorism, incitement to hatred or violence, counterfeiting, and any content the law forbids.
6. Attacking third parties or the platform: denial of service, unauthorised network scanning, attempts to access another customer's data, escaping the execution sandbox.
7. Health data: Bastide is not certified to host health data.
8. Critical uses: a system whose failure can cause death, bodily harm or serious environmental damage.

This list does not exhaust what the law forbids.

Reporting content

Anyone, without an account, can report content served by Bastide from the public page https://console.bastide.app/signaler, « Signaler un contenu » (report content). The form asks for:

• what you are reporting: phishing or identity theft; malware or cyber attack; child sexual abuse; incitement to or glorification of terrorism; hatred, harassment or violence; infringement of copyright, a trademark or another right; privacy infringement; unsolicited bulk sending; other illegal content;
• the exact address of the content, one per line, ten at most;
• an explanation of at least 20 characters;
• your name and email, to notify you of the decision; they are optional for child sexual abuse, and for it only;
• the good-faith statement.

The page immediately returns an acknowledgement with its reference (sig_…) and the time of receipt: keep them. An email repeats it. Glowsoft then decides with a stated reason, in principle within 72 hours, and informs both the reporter and the site's publisher of the decision and the means of redress.

Attention. Presenting content you know to be lawful as illegal, to get it removed, is a criminal offence under French law.

The same notice can be sent through the API, without a token: POST https://api.bastide.app/v1/abuse-reports. To keep the route from becoming a spam relay, a single IP address sends at most five reports per hour (429 beyond), and the acknowledgement email copies nothing you wrote.

The reporter's data (name, email, IP address, explanation) is anonymised twelve months after the decision; the reference, category and decision remain, for transparency statistics.

How Glowsoft detects and acts

Glowsoft has no general obligation to monitor hosted content, and does not examine your data except on a report, at an authority's request or to check a technical signal, with a recorded reason.

Automated tools read technical signals: abnormal CPU consumption, abnormal outbound traffic, mining software fingerprints. They can trigger a freeze without human intervention for mining, phishing, bulk sending, quota circumvention and attacks on third parties. Any decision that confirms a freeze or terminates the contract is taken by a person, and you can ask at any time for a person to review an automatic freeze.

The time limits Glowsoft sets itself:

Counterfeiting and other illegal content do not lead to an immediate freeze: Glowsoft examines the notice and hears you where possible before deciding.

The mining freeze

The mining profile is judged by the control plane, never by the server observing it: CPU above 95 % for at least five minutes, without matching traffic, meaning fewer than one request served per minute. A genuinely busy site serves far more requests when it saturates its CPU.

The free project also has a sustained CPU cap of 0.25 core, beyond which the workload is throttled. A free project can also be suspended automatically when several phishing indicators agree; a paid project is never suspended on that ground alone.

What the freeze does, and what it keeps

Freezing a project means stopping its compute and withdrawing its addresses: its containers stop without being removed, and its addresses are no longer served. Depending on severity, the organisation's accounts can no longer sign in and their tokens are refused.

A freeze destroys no data: files, databases, images and logs stay intact, and the project resumes as it was, without a rebuild, if the freeze is lifted. Before any action, Glowsoft seals the evidence; an incident file timestamps every step. During the freeze and the contest, the full export of your data stays open (see Leave Bastide), unless an authority forbids it.

A freeze is only lifted by a human decision: no signal, and no absence of a new signal, unfreezes a project.

Notification and contest

At the latest when the freeze takes effect, you receive by email a reasoned notice stating the measure taken, its scope and duration, the facts behind it (with the measurement, for an automatic freeze), the use of automated means, the clause at stake and your means of redress.

1. Contest in writing, at the address given in the notice, within 14 days, quoting the freeze's reference. A late contest is still examined.
2. A Glowsoft staff member decides within 48 hours of receiving the contest, with a reasoned decision. The freeze stays in place meanwhile.
3. Without a contest, Glowsoft decides at the end of the 14 days, in the same way.

The outcome:

• the freeze is lifted if the forbidden use is not established, or if it has stopped and will not recur;
• otherwise, the contract is terminated, without refund, and the export stays open for 30 days;
• for quota circumvention, Glowsoft first closes the duplicate accounts, projects or trials and asks for the evaded sums to be settled; termination only follows a repeat offence.

The decision does not deprive you of any other remedy: mediation for a consumer, the competent court.

Note. A contest is made in writing; there is no console screen yet to file or follow it.

Authorities

Glowsoft only discloses your data to a competent authority, on a lawful request. It removes within 24 hours content targeted by an administrative request for incitement to or glorification of terrorism or child sexual abuse material, and informs the authorities without delay of any suspected offence threatening people's life or safety. Terrorist content removed on an order is kept for six months.

See also: Sovereignty, Security, Leave Bastide, Troubleshooting.

Report a mistake on this page