Acceptable Use Policy

1. Who this applies to

This policy is part of the Terms of Service and applies to everybody who uses FiveStaff — owners, staff, and anybody acting on their behalf. If you are an owner, you are responsible for your staff following it.

2. The staff powers, and what they are for

Live view, calls, identifier lookups, the player log and framework data exist so that staff can work out what happened on the server and do something about it. They must not be used:

• to watch a player for any reason that is not about running the server — curiosity, a grudge, a joke, or because somebody asked you to;
• to follow a particular person, or to keep watching once the thing you were looking into is dealt with;
• to gain an advantage in game, for yourself or anybody else;
• to look up somebody's identifiers, address or accounts for a purpose outside your server; or
• to share what you saw outside your staff team, including clips, screenshots and identifiers, except where you need to — for a genuine report to the platform or to the police, or where the player has agreed.

Your server rules must tell players that staff can watch them. Hiding that is not a fair basis for collecting it, and it is also a breach of this policy.

3. What you must not do, generally

• Break the law, or help somebody else to.
• Harass, threaten, stalk or expose anybody, or use FiveStaff to build a profile of somebody to be used against them off your server.
• Upload anything unlawful as evidence, including anything sexual involving a child, which we report.
• Collect personal data you have no lawful basis to collect, or keep it for a purpose you never told anybody about.
• Use the shared ban list dishonestly — contributing bans that are not what they say they are, or using it to harm somebody rather than to keep cheats out.
• Share an account, a server key or an API key, or give somebody access you would not give them a role for.
• Resell, sublicense or rebrand FiveStaff, or present it as your own.
• Take the software apart, change it, or get round the limits of your plan.
• Attack the service — scanning, brute force, denial of service, or testing our security without written permission. Report a vulnerability to us instead; we will not take action against anybody who does.
• Scrape the service, or automate it beyond the published API and its rate limits.

4. Evidence, clips and screenshots

Evidence attached to a report is there to decide the report. Keep it inside your staff team. Publishing a clip of a player to humiliate them is a breach of this policy whatever your server's culture is, and it is often unlawful as well.

5. What happens if this is broken

We may remove content, suspend an account or a server, or close it, depending on how serious it is and whether it is still happening. Where it is reasonable we warn first. Where somebody is being harmed, we act straight away.

Serious misuse of staff powers against a player is the one thing we will act on fastest, including on a report from the player rather than from the server's owner.

6. Reporting misuse

Open a ticket in our support Discord (discord.gg/hydralabs) with what happened, which server, and roughly when. If you are a player reporting a staff team, say so — we will not pass your report to them without telling you.

Security problems go in a ticket there too, never in a public channel.