Acceptable use policy

Draft for legal review. This page is not yet in force and may change before VCTR launches. Text in [brackets] is still to be completed.

VCTR Links and QR Codes are trusted by the people who scan them. To keep that trust, you may not use VCTR, directly or through a Destination, for any of the following.

Not allowed

• Phishing and fraud: pages that trick people into giving passwords, payment details or other personal data, or that impersonate another person or organisation.
• Malware: downloads or pages that install, or try to install, harmful or unwanted software.
• Spam: Links sent in unsolicited bulk messages, or used to hide where spam leads.
• Illegal content: anything illegal where you or your visitors are, including child sexual abuse material, which we report to the authorities.
• Deceptive redirects: changing a Destination to mislead people who scanned or clicked in good faith, or cloaking a Destination from our checks.
• Harassment and hate: content that threatens, harasses or incites violence against people.
• Abusing the service: creating several Free Workspaces to get around limits, sharing accounts to evade seat limits, or loading the redirect or API beyond normal use.

How we enforce it

• Destinations are checked against Google Web Risk and URLhaus when a Link is created or changed, and again every week.
• A match Flags the Link: visitors see a warning page instead of the Destination, with no way through for phishing and malware, and the Workspace's Owner is emailed. Our staff then review it and clear it or take it down.
• A Link that is taken down stops redirecting for good. Its Code is retired and never reused.
• For repeated or serious abuse we may disable the whole Workspace or account.
• [Appeals: how to contest a takedown.]

Report a Link

Seen a VCTR Link used for any of the above? Report it. You don't need an account.