What links may not be used for

Not allowed

You may not use DL2App links, pages or QR codes to send people to, or to help spread:

• Phishing or impersonation. Pages that pretend to be another company, app or person, or that collect passwords, card numbers or recovery phrases under false pretences.
• Malware or unwanted software. Anything that installs software without clear consent, or downloads that are not what they claim to be.
• Scams and fraud. Fake giveaways, advance-fee schemes, counterfeit goods, fake support lines.
• Spam. Links sent in bulk to people who did not ask for them, by email, SMS or messaging apps.
• Illegal content. Material that is illegal to distribute where it is served or where it is viewed, including child sexual abuse material. We remove such material when we learn of it, and report apparent child sexual abuse material to the National Center for Missing and Exploited Children (NCMEC) as United States law requires.
• Harassment or harm. Content that threatens people, publishes private information about them, or promotes violence.
• Hiding the destination. Chains of link shorteners, redirects built to evade filters, or showing reviewers one destination and visitors another.
• Attacks on the service. Probing or overloading it, getting around plan limits or these controls, or registering addresses that imitate someone else’s brand.

Using links for apps you do not own or represent, in a way that suggests you do, counts as impersonation.

What we do about it

Before a link goes live

• Every destination is checked when a link is created or edited. A destination on our deny list, or one that is plainly disguised (for example a lookalike spelling of a well-known brand using characters from another alphabet), is refused with the reason.
• Destinations must be https addresses on the public internet.
• Accounts in their first 7 days can create up to 100 links a day and 40 an hour. Until an email address is verified, the limit is 50 a day.

After it is live

• New and changed links are scanned again in the background and active links are re-scanned every 24 hours, because a harmless page can be swapped for a harmful one later.
• A destination found to be malicious gets its link flagged: the link shows a warning page instead of redirecting. Destinations that only look suspicious are sent to a person on our team, and the link keeps working while they look.
• If 3 of a team’s links are flagged within 24 hours, the team cannot create new links until we have reviewed them. Its other links keep working.
• Anyone can report a link. We aim to review reports within 24 hours.
• For serious or repeated abuse we suspend the team, which stops all of its links.

If your link is flagged

The team’s owners get an alert in the dashboard and an email saying which link and why. Open the link in the dashboard to see the reason and to appeal. You can appeal once per flag; a person reads it, and we aim to answer within 2 days. If we got it wrong, the flag is removed and the same destination will not be flagged by our own checks again.

Automatic checks make mistakes, and some of ours are deliberately cautious. A real sign-in page on your own domain should not be flagged; if it is, appeal, and consider verifying the website under Domains in your project.

Contact

Abuse reports: the report form or abuse@dl2.app. Law enforcement and legal requests: abuse@dl2.app, as valid legal process under United States law. We tell the affected customer about a request unless the law forbids it.