Acceptable Use Policy

This Acceptable Use Policy (the "AUP") explains what you can and can't run on Orca. It applies to anyone using Orca, on the free tier or any paid plan. The AUP is part of our Terms of Service.

What you can run

• Vanilla Minecraft Java Edition servers.
• Modded Minecraft (Forge, Fabric, NeoForge, Quilt) including popular packs like All The Mods 10, Vault Hunters, RLCraft, Pixelmon, Better MC, and modpacks of your own design.
• Plugin-based servers (Paper, Purpur, Folia, Spigot, Bukkit) for mini-games, SMPs, towny, prison, skyblock, and most game modes.
• Private SMPs and friends-only worlds.
• Public community servers, provided you comply with the prohibited-use list below and with the Minecraft EULA.
• Cross-play servers using Geyser or Floodgate.
• Educational and youth-club servers operated by a verified school or guardian.

What's prohibited

You may not use Orca, the Orca AI assistant, or any server you run on Orca to do any of the following.

Child safety

• Creating, hosting, sharing, or soliciting CSAM, or any sexual content involving minors.
• Grooming, sexual exploitation, or sexual extortion of minors on a server you run.
• Sexualizing in-game characters or skins that are clearly intended to represent minors.

Harassment, hate, and threats

• Harassment, bullying, doxxing, stalking, or threats of violence.
• Hate speech: content that promotes hatred, discrimination, or violence against people based on race, ethnicity, national origin, religion, gender, sexual orientation, gender identity, disability, or other protected characteristics.
• Promotion of, recruitment for, or coordination by violent extremist or terrorist organizations.
• Glorification or encouragement of self-harm, suicide, or eating disorders.
• Non-consensual intimate imagery or content used for sexual extortion.

Security and abuse of other services

• Malware, ransomware, spyware, trojanized mods or plugins, or remote-code-execution payloads.
• Using Orca infrastructure to attack other services: DDoS, port scanning, credential stuffing, brute-force attacks, exploitation of vulnerabilities you don't own, or sending spam.
• Probing or scanning Orca infrastructure beyond your own server. Security research is welcome through our coordinated disclosure program; email security@orcaclient.com first.
• Circumventing authentication, billing, rate limits, free-tier caps, IP bans, or any other security or abuse control.
• Cryptocurrency mining, distributed compute marketplaces, or other workloads that don't belong on a Minecraft server.

Resource and rate-limit abuse

• Sustained CPU, memory, disk, or network use beyond the limits of your plan, or behavior that degrades the experience for other customers on shared infrastructure.
• Running multiple accounts or coordinating with others to extend the free tier or trial credits.
• Abuse of the Orca AI assistant: prompt-injection attempts against our security boundaries, attempting to extract system prompts or provider keys, or using the assistant to generate content prohibited by the AUP.
• Automated scraping of Orca pages or APIs outside of documented public endpoints and rate limits.

Commercial servers and monetization

Public, monetized Minecraft servers are allowed only to the extent they comply with Mojang's Commercial Usage Guidelines and the Minecraft EULA. You are responsible for that compliance. The following are not permitted on Orca, regardless of Mojang's rules:

• Pay-to-win monetization that goes beyond what Mojang permits, including selling gameplay advantages, in-game currency that is tradeable for real-world money, or gambling-style mechanics targeted at minors.
• Real-money gambling, betting, or wagering.
• Selling or distributing third-party paid plugins, mods, or modpacks that you don't have a license to redistribute.

Enforcement

We investigate AUP reports and act based on the severity and evidence. Typical enforcement progression:

1. Warning. For low-severity, first-time issues, we send a written warning and ask for remediation within a defined window.
2. Suspension. Server suspended (stopped, world preserved) while we investigate, or until the issue is fixed.
3. Termination. Account closed and worlds queued for deletion in line with the retention schedule in the Privacy Policy.
4. Law-enforcement referral. For severe violations, we preserve evidence under applicable law and report to law enforcement and, in CSAM cases, to NCMEC.

For severe violations (CSAM, credible threats of violence, large-scale attacks on other services), we may skip directly to termination and referral without prior warning.

Reclaiming subdomains and worlds

On termination for a serious AUP violation, we reclaim any Orca-issued subdomain (for example, yourname.orcahosting.app), delete server worlds and uploaded files in line with our retention schedule, and prevent re-registration of the same identifier for a minimum of 12 months. We will give you a reasonable opportunity to download a copy of your world files before deletion unless we are legally barred from doing so.

Appeals

If you believe enforcement action was taken in error, email appeals@orcaclient.com within 30 days. Include your account email or Discord ID and a brief explanation. We aim to respond within 10 business days. CSAM and serious-safety decisions are final and not subject to appeal.

Reporting abuse

To report an Orca-hosted server that violates this AUP, email abuse@orcaclient.com with the server address, the violation, and any evidence (chat logs, screenshots, links). We treat reports of child safety issues as top priority.