Acceptable Use Policy
Version 1.1 · Effective: 02 November 2026
Version 1.1 revises and simplifies operational and enforcement commitments. Existing customers transition on the effective date above following 14 days' notice; new customers accept this version at signup.
This Acceptable Use Policy ("AUP") describes what you may publish on display.dev ("Service") and how violations are handled. By using the Service you agree to this AUP, which forms part of the Terms of Service.
1. Accepted File Formats
Supported file formats and size limits are described in our documentation and pricing page. They may change as the Service develops.
2. Prohibited Content
The following content categories are prohibited regardless of plan or configuration:
| Category | Why |
|---|---|
| Phishing and credential harvesting | Fraudulent pages that impersonate other services or solicit login credentials. |
| Child sexual abuse material (CSAM) | Illegal under US and EU law; we are required to report to NCMEC and preserve evidence. |
| Malware and drive-by downloads | Content designed to compromise visitors' systems. |
| Sexually explicit or NSFW content | Prohibited to preserve access for our B2B customer base through corporate proxies and filters. |
| Copyright-infringing content | Content that violates third-party intellectual property rights. We comply with the DMCA. |
3. Prohibited Data Categories
Regardless of content category, the following types of personal data may not be uploaded:
- Protected Health Information (PHI) — display.dev does not offer a Business Associate Agreement; any PHI use is unauthorised.
- Payment card data (PCI) — card numbers, magstripe tracks, CVV codes.
- GDPR Article 9 special categories — health, biometric, racial or ethnic origin, religious beliefs, political opinions, sexual orientation, trade union membership, or criminal record data.
- Children's data — data relating to individuals under 16 (EU/GDPR) or under 13 (US/COPPA).
- Non-public financial records (GLBA) — prohibited without a separate written agreement.
4. Prohibited Use Patterns
Behavioural restrictions that apply regardless of what is published:
- Using artifact URLs as a general-purpose content delivery network unrelated to display.dev's gated publishing use case.
- Serving scraped third-party content without substantive transformation.
- Automated account creation or account farming to circumvent per-organization tier limits.
- Scripted scraping of the Service via API or viewer endpoints.
- Any activity that materially degrades the Service for other customers.
5. Rate Limits
Rate limits protect the security and availability of the Service. The table below describes current operational limits, not a guaranteed service level. We may adjust these limits to address abuse, capacity or reliability needs.
| Surface | Limit |
|---|---|
| Publish or update an artifact | 30 per minute per API key |
| Anonymous (claimable) publish | 10 per hour per IP address |
| User API key requests (all endpoints) | 120 per minute per key |
| Org / CI API key requests (all endpoints) | 600 per minute per key |
| Guest viewer OTP — send | 5 per minute per email address |
| Guest viewer OTP — verify | 10 per minute per IP address |
| Account email OTP (sign-in / sign-up) | 30 per minute per IP address — combined limit covers both sending and verifying the code |
| Authenticated session requests (web dashboard) | 100 per minute per session |
Requests that exceed a limit may be temporarily restricted.
6. Enforcement
We may restrict requests, remove content, or suspend or terminate accounts to address violations. Measures depend on the nature and severity of the issue, including repeated abuse and risks to other users or the Service. We may act without prior notice where necessary.
We investigate reports of abuse and handle illegal content, copyright notices, counter-notices and legally required reporting or evidence preservation under applicable law. Send reports to report@display.dev.
7. Reporting and Contact
To report a violation or submit a DMCA takedown notice: report@display.dev
For general questions about this policy: legal@display.dev
Displaydev OÜ · Harju maakond, Tallinn, Estonia