Acceptable Use Policy and Notice-and-Action

This policy applies to everyone using the hosted Hearthmoot service. It forms part of the Subscription Terms. It also tells anyone, customer or not, how to report content they believe is unlawful.

1. The short version

You are running a private tabletop campaign for your own table. Almost nothing in this policy will ever be relevant to you. It exists because we host content on your behalf, which brings obligations that self-hosting did not.

2. What we do not do

We do not monitor what you write. We do not scan tenant content, index it into any shared search, run analytics on page bodies, or inspect it automatically. Under the EU Digital Services Act art. 8 we are under no general obligation to monitor stored content, and we do not take one on voluntarily.

We act on notices. That is the whole mechanism.

3. Your content and your rights to it

You are responsible for having the rights to what you upload.

On material from books you own: copying a setting, adventure, or statblocks from a book you bought into your own private campaign, for your own table, is your business. It never reaches another customer, it is not published, and we do not police it. Content packs marked personal are locked to your tenant and can never appear in any sharing or catalogue surface, which is what makes this safe rather than merely unexamined.

What changes that: distributing content to other users. Publishing is your act, and you need the rights to anything you publish.

4. What is not allowed

You may not use the Service to store, process, or distribute:

1. Child sexual abuse material. Zero tolerance. Immediate removal, immediate account termination, and a report to the competent authorities. There is no appeal and no warning.
2. Terrorist content, or content inciting violence against a person or group.
3. Content that is unlawful under Dutch or EU law, or under the law of your own country where that applies to you.
4. Material you have no right to distribute, where you are distributing it (section 3).
5. Content that harasses, threatens, or targets a real identifiable person, or that exists to dox them.
6. Non-consensual intimate imagery, or sexual content involving minors in any form, drawn or otherwise.
7. Malware, phishing pages, or anything designed to compromise systems or people.

You also may not:

1. Use the Service to attack, probe, or degrade our infrastructure or another tenant.
2. Attempt to reach another tenant's data, or test isolation boundaries without our written permission. (Genuine security research is welcome — write to [email protected] first and we will not pursue you for good-faith testing under an agreed scope.)
3. Resell or sublicense the Service, or run it as a service for third parties. Players at your own table are not third parties.
4. Use automated means to place load on the Service beyond ordinary use.

Fictional violence, horror, moral darkness, and adult themes in your campaign are not covered by this policy. Tabletop games are about conflict and often about terrible things. Writing a villain is not endorsing one. Nothing above is intended to police the content of your fiction, and we will not read your campaign to check.

5. Reporting unlawful content

Anyone can report content they believe is unlawful. You do not need an account.

Abuse contact: [email protected] — also published at hearthmoot.com/abuse.

To act on a notice we need, as DSA art. 16(2) requires:

1. a sufficiently substantiated explanation of why you believe the content is unlawful;
2. the exact URL or URLs, or other information that lets us locate it;
3. your name and email, unless the report concerns offences under arts. 3–7 of Directive 2011/93/EU, where you may report anonymously;
4. a statement that you believe in good faith that the information in the notice is accurate and complete.

A notice meeting these requirements gives us actual knowledge of the content for DSA art. 6 purposes. A vague complaint does not, and we will ask for what is missing rather than guess.

Most tenant content is private. It is visible only to one DM and the players they admitted. If you cannot see it, you probably cannot report it usefully, and we do not search tenant content on your behalf: our own access to a tenant is ticket-bound, logged, and notified to the customer (Subscription Terms §9.5).

6. What happens after a report

Step	Commitment
Acknowledgement	Within 2 business days
Decision on an ordinary notice	Within 14 business days of a complete notice
Manifestly illegal content, imminent risk to life or safety, or CSAM	Immediately, without waiting for the decision window
Statement of reasons to the affected customer	At the time we act
Notice to the reporter of what we decided	With the decision

We may remove or disable the content, suspend the tenant, or terminate the account, in proportion to what we found. Where we act, we give the affected customer a statement of reasons under DSA art. 17: what we did, the legal or contractual ground, the facts relied on, and how to challenge it.

Challenging a decision: reply to the statement of reasons within 30 days. We review the decision afresh against your reply and answer with reasons. We restore content that should not have been removed. You also keep your ordinary legal remedies, including going to court, and this route does not replace them.

We keep a takedown log of every notice, decision, and action, for accountability and because the DSA requires us to be able to account for what we did.

In place as of 2026-08-13 (gate 7 G7.3). TakedownNotice in the control-plane database records every notice, every decision, and every action taken on it, written to by the public report form and the operator's decide screen ([internal reference removed], [internal reference removed], [internal reference removed]). This paragraph describes a live control rather than an intention.

7. Copyright notices from US rightsholders

US rightsholders use the same route as everyone else: [email protected], published at hearthmoot.com/abuse, handled under the DSA — our framework as a Dutch provider.

US §512 designated agent: not yet registered. Until it is, US rightsholders use the DSA route above, which we run for everyone. When the agent is filed with the US Copyright Office, this section gains its details.

8. Our legal position, stated openly

We are a hosting service under the DSA. Under art. 6 we are not liable for content a customer stores, provided we do not have actual knowledge of illegal content and act expeditiously once we do. Art. 8 confirms we owe no general monitoring duty.

We rely on this, and sections 5 and 6 are the price of it. The bargain is that we do not look, and in exchange we answer valid notices properly and quickly.

9. Enforcement against subscribers

Where you breach this policy we may remove content, suspend, or terminate under Subscription Terms §13. Except for section 4.1 and other immediate-harm cases, we give notice and 14 days to fix it first. Where we terminate, the data timetable in Subscription Terms §8 still applies, so you can still export.

10. Changes

We publish changes to this policy and notify subscribers by email where the change materially affects them.

---

Version: 1.0. Date: 2026-09-30.