# Acceptable use

> What IRT may be used for, what it may not, and how to report abuse. Draft for legal review.

> **Draft for legal review.** This policy is not in force. Its wording
> will change before launch.

IRT is for games and interactive apps. This policy applies to everything
a tenant runs or serves on IRT: room code, sites, and the traffic they
send and receive.

## Allowed

Multiplayer games, and interactive apps that fit rooms: shared
whiteboards, collaborative tools, live events, and the tests, tools and
bots that support them.

## Not allowed

- **Cryptocurrency mining**, or any use of rooms for computation unrelated
  to the game or app.
- **Proxies, VPNs and tunnels**, or relaying traffic for third parties.
- **Phishing**: sites that imitate another service or collect credentials
  or payment details under false pretences.
- **Malware**: serving or controlling malicious software.
- **Attacks**: scanning, flooding or breaking into other systems, from
  rooms or sites.
- **Spam**: unsolicited bulk messages through any part of IRT.
- **Illegal content**, and content that sexually exploits minors, without
  exception.
- **Harassment**: using IRT to threaten, stalk or abuse people.
- **Evading limits**: working around spending caps, rate limits, room size
  reservations or the isolation between tenants.

Outbound network limits on rooms are high enough for games and low enough
to catch proxies. Reaching them repeatedly is a reason to look at a
project.

## Content on the user content domain

Tenant sites are served only from `irt-serve.com`, never from `irt.io`.
Each tenant is responsible for what its sites and rooms serve, including
content its players create.

## Enforcement

We may hibernate or delete rooms, take down sites, suspend projects or
suspend tenants that break this policy. Where we can, we tell the tenant
first and give them a chance to fix the problem. For phishing, malware,
attacks and content that exploits minors, we act first.

## Reporting abuse

Email [abuse@irt.io](mailto:abuse@irt.io) with the address of the site or
the project involved, what you saw and when. We read every report.