What dFly may not be used for.
Last updated 19 July 2026
dFly is a privacy product, and we deliberately hold very little about what you do with it. That is exactly why this policy matters: the limits below are the ones we can enforce without watching your traffic, and they form part of our Terms and Conditions.
No port scanning, intrusion attempts, denial-of-service traffic, credential stuffing, or any other attempt to break into or disrupt systems you do not have permission to test.
No bulk unsolicited email or messaging, and no hosting or distributing malicious software.
Do not use the service for activity that is criminal under the law that applies to you. Child sexual abuse material is an absolute line: an account credibly reported for it is closed immediately and without refund.
Your subscription is for your own use. Do not resell access, and do not share your configuration beyond the devices you control. You can see and remove your devices from the Devices page.
We may suspend or close an account we receive credible abuse reports about. Where we can, we will tell you why — sometimes we are not permitted to. An account closed for breaching this policy is not refunded; see the Refund Policy.
If you think we have got it wrong, tell us through our contact form and a person will look at it.