Acceptable Use Policy

HiddenMX is built for private email, pseudonyms and lawful speech. You may use the service without giving us your legal identity. You may not use that privacy to harm people, run scams or abuse the service.

By using HiddenMX, you agree to this policy and confirm that you are at least 18 years old. These rules apply to the clearnet website, onion service, accounts, messages, drafts, attachments and support tickets.

What is allowed

You may use a pseudonym, maintain more than one account, send personal first-contact email and express lawful opinions that other people dislike. Disagreement with an opinion or the use of an anonymous identity is not an abuse violation.

Accounts may be shared, sold or transferred. HiddenMX does not verify ownership or resolve disputes between people who know the password or recovery key. Everyone with access must follow this policy. Misuse by one person can result in deletion of the entire account.

No bulk email

Do not use HiddenMX for newsletters, mailing lists, automated campaigns or substantially similar messages sent to multiple people. This applies even when the recipients previously opted in. Purchased and scraped address lists are also prohibited.

One-to-one cold outreach is allowed. Stop contacting someone if they ask you to stop. Repeated unwanted contact may be treated as harassment.

The daily limit of 5 recipients for Free accounts and 50 recipients for Premium accounts is a hard limit. It does not make bulk mail acceptable.

Prohibited conduct

Do not use HiddenMX to:

• Send phishing messages, scams or fraudulent payment requests
• Impersonate another person or organization to deceive someone
• Distribute malware, ransomware, exploit code or malicious attachments
• Steal or solicit passwords, recovery keys, authentication codes, payment details or other credentials
• Threaten, extort, stalk, dox or repeatedly harass another person
• Distribute non-consensual intimate content
• Create, request, distribute or store child sexual abuse material
• Groom, traffic or sexually exploit another person
• Sell or distribute stolen accounts, stolen data, malware, forged identity documents, illicit drugs or unlawfully sold weapons
• Attack, disrupt or gain unauthorized access to an account, server, network or device
• Help another person carry out any of the conduct listed above

Using a pseudonym is allowed. Using someone else's identity to deceive or defraud is not.

Abuse of HiddenMX

Do not:

• Automate registration or bypass the CAPTCHA
• Use additional accounts to evade sending limits, storage limits, payment requirements or the 40-day account lock
• Flood the service, another mailbox or a third-party mail server
• Use mail attachments as a general-purpose file hosting service
• Exploit a bug to obtain mail, account data, service access or resources that do not belong to you
• Submit fabricated abuse evidence or use support tickets to harass someone

You are not responsible merely because someone sends an unwanted or prohibited message to your mailbox. Intentionally arranging to receive, store or distribute prohibited material is a violation.

Security testing

Do not scan, load test, probe or attempt to exploit HiddenMX without written permission.

Request permission through the contact page before testing. Approval must identify the systems and methods covered. Testing outside that approval is a violation even if it causes no visible damage.

Reporting abuse

Submit abuse reports through the contact page and choose the Abuse department.

Include as much of the following as possible:

• The HiddenMX address involved
• The original message and full headers
• The Message-ID
• Relevant dates, times and time zone
• A description of what happened
• Any evidence needed to understand the report

Do not send passwords, recovery keys, wallet seed phrases or private keys.

We will acknowledge the report or begin an initial review within seven calendar days. Credible reports involving immediate danger or ongoing harm receive priority.

How reports are reviewed

A complaint by itself is not proof of a violation. We compare the material supplied by the reporter with relevant account, delivery and security records.

We may inspect stored message headers to investigate abuse reports or troubleshoot delivery and security problems. Headers include the subject, sender and recipient addresses, delivery route, and authentication results. We do not read stored message bodies or attachments for ordinary abuse investigations. Those may be accessed when a valid legal demand requires it.

Automated spam scoring does not decide whether an account violated this policy.

Enforcement

One confirmed violation results in permanent account deletion. We do not provide a warning, appeal or refund.

This applies to Free and Premium accounts, including shared, sold or transferred accounts. Paying for Premium does not provide an exception to these rules.

Account access ends when the account is deleted. Its invoices and linked support tickets are removed, and its mailbox is queued for deletion. Copies already delivered to another person or provider remain outside our control.

When a valid legal preservation duty applies, HiddenMX may retain the specific records required after the account is deleted. Those records are handled under the Privacy Policy.

Changes to this policy

We will update this page and its date when the policy changes. If a change materially affects existing accounts, we will provide an account notice or email when practical.

If you do not accept this policy, stop using HiddenMX and delete your account.