Acceptable Use Policy

What dFly may not be used for.

Last updated 19 July 2026

What this covers

dFly is a privacy product, and we deliberately hold very little about what you do with it. That is exactly why this policy matters: the limits below are the ones we can enforce without watching your traffic, and they form part of our Terms and Conditions.

Do not attack other systems

No port scanning, intrusion attempts, denial-of-service traffic, credential stuffing, or any other attempt to break into or disrupt systems you do not have permission to test.

Do not send spam or distribute malware

No bulk unsolicited email or messaging, and no hosting or distributing malicious software.

Do not use dFly for criminal activity

Do not use the service for activity that is criminal under the law that applies to you. Child sexual abuse material is an absolute line: an account credibly reported for it is closed immediately and without refund.

One subscription, your own devices

Your subscription is for your own use. Do not resell access, and do not share your configuration beyond the devices you control. You can see and remove your devices from the Devices page.

What happens if you breach this

We may suspend or close an account we receive credible abuse reports about. Where we can, we will tell you why — sometimes we are not permitted to. An account closed for breaching this policy is not refunded; see the Refund Policy.

If you think we have got it wrong, tell us through our contact form and a person will look at it.