Safety and reporting

What is prohibited

Do not use Droptunnel for or to facilitate:

• child sexual abuse, grooming, or exploitation;
• terrorism, violent extremism, or credible threats of violence;
• non-consensual intimate images or sexual exploitation;
• malware, phishing, ransomware, credential theft, or fraud;
• harassment, stalking, extortion, impersonation, or doxxing;
• unlawful copyright infringement, privacy violations, or disclosure of confidential material; or
• any content or conduct that is illegal in an applicable country.

The fuller acceptable-use rules are in our Terms of Service.

How to report illegal content or misuse

Email abuse@droptunnel.com. Use a clear subject such as “Urgent safety report” or “Illegal use report.”

Where available, include:

• the date, time, and time zone of the incident;
• the tunnel code, but only if it is still safe to provide it;
• a factual description of what happened and the relevant country;
• whether anyone is at immediate risk and whether authorities have already been contacted;
• screenshots, message headers, file hashes, or other evidence you can lawfully share; and
• how we can contact you for clarification.

Do not attach or forward suspected child sexual abuse material, intimate images, malware, or other illegal content. Describe it and tell us which competent authority has received it instead.

How to report a security vulnerability

Send security findings to security@droptunnel.com. Include reproduction steps, affected URLs or versions, impact, and a safe way to contact you. Do not access another person’s information, disrupt production, use social engineering, or publicly disclose an unremediated issue.

How we handle reports

Denovi Ltd may:

• triage the report and request additional information;
• check available connection, device, billing, security, and operational records without attempting to weaken encryption;
• restrict service access, networks, devices, browser passes, or Plus subscriptions where proportionate and technically feasible;
• preserve available information when required for safety or legal process;
• report matters to law enforcement, regulators, safeguarding bodies, or other competent organisations where required or appropriate; and
• notify an affected person where lawful and safe.

We prioritise credible reports involving immediate danger, children, terrorism, serious violence, or active malware. We aim to acknowledge reports promptly, but response time depends on severity, available evidence, and legal requirements.

What encryption means for reports

Content is encrypted in the sender’s browser and is normally available only to the connected recipient. We do not maintain a plaintext content archive and may have no copy to inspect or remove after a transfer. Tunnel control records are short-lived.

This protects legitimate privacy but also limits retrospective investigation. A detailed report from a participant, including lawfully captured evidence and precise timing, may therefore be essential. Encryption does not make prohibited conduct lawful and does not prevent us acting on the records or controls that are available.

Complaints and review

If you believe we handled a safety report incorrectly, email legal@droptunnel.com with the original report date, any reference or subject line, the decision you disagree with, and the outcome you seek. A person not responsible for the original response will review the complaint where reasonably practicable.

You may also contact the relevant regulator, law-enforcement body, or court. Privacy complaints can be made as described in our Privacy Notice.

Adults-only service

Droptunnel is not intended for anyone under 18. An age restriction in our Terms does not prove a person’s age. If you believe a child is using the service or is at risk, report it through the route above. Denovi Ltd assesses child-access and safety risk separately from these public rules and may introduce additional age or access controls.