Acceptable Use Policy

SN WHITE HOSTING – Acceptable Use and Security Policy

Effective date: October 24, 2026

This policy sets out what uses are allowed and prohibited on all SN WHITE HOSTING™ services (hosting, reseller, VPS, dedicated servers, game servers, storage and domains), which security measures are your responsibility and which ones we apply. The terms of each service may add their own rules. The service is provided by SN SOLUTIONS LLC.

1. GENERAL PRINCIPLES

You must use the services lawfully and responsibly, without:

• Breaking the law of any applicable country.
• Putting at risk the security, stability or performance of our infrastructure or other customers.
• Infringing other people's privacy or rights.

You are responsible for the use made of your services by your users, your customers and anyone you give access to.

2. PROHIBITED ACTIVITIES

On no service may you:

• Attack or compromise systems: denial-of-service (DDoS) attacks, unauthorised port or vulnerability scanning, brute-force attacks, intrusions or any attempt to get around security measures, ours or anyone else's.
• Malware: host, distribute or control viruses, trojans, ransomware, botnets or command-and-control servers.
• Fraud and phishing: impersonate people or companies, create pages that imitate others to obtain data, run scams or any form of fraud.
• Spam and sending unsolicited email (section 4).
• Cryptocurrency mining, on any service.
• Open proxies and Tor exit nodes. You may use private VPNs or proxies for your own use on VPS and dedicated servers, provided they are not open to the public.
• Rebroadcast content without rights, such as pay TV channels (illegal IPTV) or sports events.
• Abusive scraping or generating automated traffic that affects other networks or websites without their authorisation.
• Use the services for any illegal activity or one that could expose us to legal liability.

3. PROHIBITED CONTENT

You may not host, transmit or distribute:

• Child sexual abuse material. Zero tolerance: we will remove it immediately, cancel the service and report it to the authorities.
• Adult content: pornography or sexually explicit material, even if legal.
• Terrorist content or content inciting violence, hatred or discrimination.
• Material that infringes copyright, trademarks or other intellectual property rights without authorisation, including pirated software.
• Third parties' personal data published or processed without a legal basis.
• Fraudulent, defamatory or misleading content, and the sale of illegal products or services.

4. EMAIL

• Spam is prohibited: commercial emails to people who have not requested or agreed to them, phishing campaigns or mailings with false senders.
• Your mailings must comply with the law on commercial communications and data protection: only to recipients who have given consent or with whom there is a prior relationship that allows it, with a simple way to unsubscribe and without using purchased lists.
• For bulk mailings or newsletters, use a specialised service.
• Accounts that break these rules may be blocked to protect the reputation of our IP addresses.

5. USE OF RESOURCES

Each service has the resources of its plan. On shared services (web hosting, reseller, game servers and storage), fair use rules apply so that one account does not harm the rest. The specific limits are in the terms of each service.

6. SECURITY: YOUR RESPONSIBILITIES

6.1. Accounts and passwords

• Use unique, strong passwords of at least 12 characters combining upper- and lower-case letters, numbers and symbols. We recommend using a password manager.
• Turn on two-step verification wherever it is available.
• Do not share your credentials and change them if you suspect they have been exposed.

6.2. Applications and servers

• Keep the system, content management systems (WordPress and others), plugins and themes up to date, and remove those you do not use.
• Set file and folder permissions correctly (avoid 777 permissions) and do not leave insecure default configurations.
• Use SSL certificates on your websites and applications.
• On unmanaged VPS and dedicated servers, the security of the server (firewall, updates, users and exposed services) is your responsibility.

6.3. Email

Set up SPF, DKIM and DMARC on your domains, turn on spam and malware filters, review your accounts' activity and avoid automatic forwarding to untrusted addresses.

6.4. Backups

Keep backups of your important data, store at least one outside the service itself and check that you can restore them. The backups included with each service are described in its terms.

6.5. Tell us

If you notice suspicious activity or believe your account or service has been compromised, tell us immediately by ticket or at abuse@snwhitehosting.com.

7. SECURITY AND CONTINUITY: WHAT WE DO

• Infrastructure protection: firewalls, malware scanning and intrusion detection on shared servers, administrative access with two-step verification, logging of administrative actions and encryption of sensitive data in transit and at rest.
• Redundancy: critical services (web, email and DNS) have redundancy mechanisms where the architecture allows it. Redundancy reduces interruptions but does not eliminate them entirely.
• Incident management: for a serious incident we follow a recovery plan: detection, impact assessment, containment, recovery from the backups available for each service, verification and closure with a root-cause analysis.
• Indicative recovery objectives for web hosting: restoring the service in about 2 hours, with a maximum data loss of up to 24 hours depending on the available backups. For VPS, dedicated servers and game servers they depend on the customer's backups or the plan ordered. These are objectives, not guarantees; the availability commitments are those in the SLA of the General Terms of Service.
• Communication: we report relevant incidents by email, on the status page status.snwhitehosting.com and through the support channels.
• Personal data breaches: if a breach affects personal data, we will notify the supervisory authority within 72 hours where the law requires it, and inform those affected without undue delay if there is a high risk to them.

8. WHAT HAPPENS IF THIS POLICY IS BREACHED

Depending on the seriousness, we may:

• Ask you to fix the problem within a reasonable period.
• Restrict or temporarily suspend the affected service.
• Cancel the service or the account in serious or repeated cases.
• Charge you the costs the abuse has caused us (for example, getting removed from blocklists).
• Cooperate with the authorities and comply with court orders.

We will act immediately, without prior notice, where there is a risk to third parties or our network (attacks, malware, phishing, mass spam), child sexual abuse material or an order from an authority. In other cases we will let you know first and give you the opportunity to fix it.

Suspensions or cancellations for breaching this policy do not release you from paying for services already invoiced.

9. REPORTS

If you find a use contrary to this policy on our services, you can report it as explained in Abuse, Intellectual Property and DSA or on the Report illegal content page.

10. CHANGES TO THIS POLICY

We may change this policy. We will give you at least 15 days' notice, unless a change is needed immediately for legal or security reasons. If you do not agree with the changes, you may cancel the affected services free of charge before they take effect.