1. Purpose
This page sets out Hong Kong facility security and cooperation requirements. Its prohibited-use list is also adopted as Hoststare’s worldwide service policy. Read it with the terms of service and Acceptable Use Policy.
2. Deployment scope
The prohibited-use list applies to every Hoststare service worldwide, irrespective of customer or server location. Separate Hong Kong facility operating requirements apply to services actually hosted there; they do not limit the worldwide scope of the prohibited-use list.
3. Law and responsibility
Customers are responsible for content provenance, data authority and guest activities, following applicable Hong Kong law and upstream regional restrictions affecting the service. Facility limits can be stricter than general legality; discuss unusual uses before ordering.
4. Facility action
Security or compliance issues can trigger warnings, restrictions, suspension, termination or lawful reporting. Lack of a prior customer notice does not prevent urgent upstream action.
5. Registration and naming
Follow account and order procedures. Names, domains and host identifiers must not impersonate others, infringe rights or carry unlawful or disruptive material.
6. Content and activity restrictions
All prohibited uses listed here are Hoststare service restrictions that apply worldwide, regardless of the customer’s location or the server’s location. They apply even where local law permits the activity.
- No obscene material, adult-product trading or sexual-service information.
- No illegal betting, online casinos or related trading platforms.
- No narcotics, drug precursors or hazardous chemicals.
- No firearms, ammunition, military or police equipment, eavesdropping devices or hacking software.
- No forged documents, counterfeit currency, illegal negotiable instruments, private-data trading, phishing, scams or fake-base-station information.
- No unlawful political, subversive or national-security-threatening information, or activity violating Hong Kong or Mainland China law.
- No unauthorised intrusion, scanning, attacks, tampering, malware, backdoors, spam, resource abuse or disruption of cybersecurity or public order.
7. Sensitive data
Retain necessary business data with risk-appropriate access controls and encryption. Do not store or transmit unauthorised personal data or infringing contents.
8. Authentication and patches
Use strong authentication and SSH keys or two-factor authentication where supported and correctly configured. Apply patches and retain a working recovery path before changing authentication.
9. Checks and anomalies
The infrastructure provider may inspect operating environments for prohibited content or abnormal activity and respond to risks. Access to customer data follows necessity, valid authority and lawful requirements. A standard VPS does not include continuous security scanning or managed administration.
10. Major incidents
Handling can isolate affected networks or instances, preserve necessary evidence, notify customers and coordinate investigation. Patching and recovery depend on scope, available backups and authority, without promising recovery of unbacked-up data.
11. Risk levels
Minor controllable issues primarily require remediation; unlawful or destabilising issues can require isolation and suspension; severe harm can lead to termination and lawful reporting. Evidence, impact and ongoing risk determine the response.
12. Measures
Actions include warnings, removal of violating contents, access limits, suspension, termination and exclusion from further use. Security action does not guarantee a migration window; maintain independent backups.
13. Notification and remediation
Use the account email and tickets. Respond, remediate and supply evidence by the stated deadline. Urgent action can precede notification; inaction can lead to further restrictions.
14. Conflicts
Non-excludable law takes precedence. Specific product agreements, the Terms and this page are interpreted within their actual scope. Raise conflicts through a ticket rather than bypassing safeguards.
15. Version and contact
Version date: 10 October 2026. Material changes are published with their timing and scope. Contact Hoststare through a ticket or [email protected] for security or rule queries.
