1. Three different things, three different answers

HyperDrop is mostly software other people run on their own machines. That shapes what we are able to do when something goes wrong, so it is worth being exact about which of three situations a report concerns.

A free .hyperdrop.link name

We run the registry and the DNS behind these names. We do not have the files the name leads to, and we cannot reach into someone's server to delete anything. What we control is the name itself, so that is what we act on: we can take its DNS offline, reclaim it, and suspend or close the account that holds it.

A server someone runs themselves

A HyperDrop server on someone's own VPS or NAS is theirs. We have no copy of its contents, no account on it and no way to remove a file from it. If it is reachable at a name we issued, see above, and we will act on the name. If it is on a domain they own, there is nothing of ours involved, and the report belongs with their hosting provider or domain registrar instead. We will say so plainly rather than leave a report unanswered.

Hosting we run

Where you use HyperDrop hosting rather than running a server yourself, your shares sit on our disks. Here we can and do act on individual content: we remove what breaks this policy, and we can suspend or close the account behind it.

2. What is not allowed

These apply to any name we issue and to anything stored on hosting we run.

• Material that sexually exploits or endangers children.
• Phishing, credential harvesting, or impersonating another person or organisation.
• Malware, ransomware, or anything built to damage or gain unauthorised access to a system.
• Content you have no right to distribute.
• Threats, harassment, doxxing, or content promoting violence against people.
• Spam, or anything that leads recipients to a link we serve against their interest.
• Attacking, probing or overloading our registry, our DNS, our hosting or anyone else's server.

The terms carry further rules about how the free service itself may be used, such as bulk registration and resale. See the Terms of Service.

3. How to report something

Write to abuse@gethyperdrop.com. Tell us:

• The exact address, including the full link if you have it.
• What you saw, and when you saw it.
• Why it is a problem, in a sentence or two.
• How to reach you, if you would like to know what happened.

You do not need an account, a form or a legal document. A short email naming the address is enough to start.

We read every report. We aim to acknowledge within two working days, and we act on active phishing, malware and child sexual abuse material as soon as we see them, without waiting to reply first. HyperDrop is run by one person, so we will not pretend to a round-the-clock desk, but nothing sits unread.

4. What we do about it

Where the harm is urgent, such as live phishing, malware or material that sexually exploits children, we act first and explain afterwards. Otherwise we look at it, and we will usually contact the account holder before acting.

Depending on what we find and what we control, we may take a name's DNS offline, reclaim the name, remove content from hosting we run, suspend an account so its names stop resolving while we sort it out, or close an account outright. A suspended account keeps its names, so nothing is lost while a mistake is being corrected.

We will normally tell the account holder what happened. We cannot promise to explain every decision, or to give a name back.

5. Material that sexually exploits children

There is no appeal and no warning here. We remove the content where it is ours to remove, take the name offline, close the account, preserve what the law requires us to preserve, and report to the National Center for Missing & Exploited Children and to any other authority we are obliged to notify.

If you have found such material anywhere, you can also report it directly to NCMEC at report.cybertip.org, and you should not need our involvement to do so.

6. Copyright

This section concerns content stored on hosting we run. For a server someone runs themselves we hold no copy and cannot remove anything, so a copyright notice about one of those needs to reach the person operating it, or their provider.

Send copyright notices to abuse@gethyperdrop.com. To let us act, a notice needs:

• Identification of the work you say has been infringed.
• The exact address of the material you want removed, precise enough for us to find it.
• Your name, address and email.
• A statement that you believe in good faith the use is not authorised by the copyright owner, its agent, or the law.
• A statement that the information in the notice is accurate, and that you are the copyright owner or authorised to act for them.
• Your signature, electronic or physical.

We remove or disable access to material that a valid notice identifies, and we tell the account holder what was removed and why.

If you believe your content was removed in error, reply with a counter-notice: identify what was removed and where it was, state under penalty of perjury that you believe it was removed by mistake or misidentification, and give your name, address, email and signature. We will pass it to whoever sent the original notice, and unless they tell us they have started a court action we may restore the material.

Accounts that repeatedly attract valid notices are closed.

Knowingly sending a false notice, in either direction, carries real liability. Please do not use this process to take down something you simply dislike.

7. If we get it wrong

We will sometimes act on a report and be mistaken. Reply to the message we sent you, or write to abuse@gethyperdrop.com, and say what you think we got wrong. A suspended account keeps its names with DNS offline precisely so that reversing a mistake costs you nothing but the time it was down.

8. Requests from law enforcement

We hold very little: account records, the names issued, and the operation log described in the Privacy Policy. We do not hold the contents of servers other people run. Requests should come to abuse@gethyperdrop.com through lawful process, and we will respond to what that process actually requires and no more.

9. Changes

We will update this page when what we do changes, and the date at the top will say when. Nothing here limits what the Terms of Service already allow us to do.

10. Contact

Abuse, security and copyright: abuse@gethyperdrop.com
Privacy and data requests: privacy@gethyperdrop.com