Prohibited content

What we don't allow on publr — and what you can do about it when something slips through.

Effective:

How enforcement works

Every file uploaded to publr is scanned before the URL goes live. We combine three layers:

  • Format blocklist — executable types (e.g. .exe, .dmg, .apk, .bat, .scr) and obfuscated archives are rejected at upload time.
  • OpenAI moderation — every accepted file is passed through OpenAI's moderation API. URLs scoring above thresholds for sexual, violent, hate, self-harm or illicit content are blocked.
  • Visitor reports — every public URL has a "Report" button. Reports go straight to the abuse queue and most are reviewed within four hours.

We aim for safety with as few false positives as possible. If a legitimate file gets blocked, you can request a human review with one click — see "Block contestation" below.

What's prohibited

The following categories are not allowed on publr, in any format, under any plan:

  • CSAM (Child Sexual Abuse Material). Zero tolerance. Reported to NCMEC and Brazilian authorities.
  • Malware and ransomware. Including dropper scripts, encoders, payloads and "research" exploits packaged for distribution.
  • Phishing scaffolding. Fake-login pages, brand-impersonation kits, credential-harvesting forms.
  • Doxxing and non-consensual intimate imagery. Personal information published to harm or harass; intimate images shared without consent.
  • Content depicting illegal weapons or drug-manufacturing instructions as defined by Brazilian law (Lei 10.826/2003 and Lei 11.343/2006).
  • Content inciting terrorism, mass violence or self-harm.
  • Content infringing copyright or trademark. We honour DMCA-style takedowns within 48 hours.
  • Spam and fraud. Including pyramid schemes, fake-investment pitches, deceptive "free download" pages.
  • Adult content (NSFW) on the Free and Starter plans. Pro and Agency may host opt-in adult content with explicit age-gate flagging in the dashboard; CSAM remains prohibited at all tiers.

Categories we explicitly allow

To remove ambiguity:

  • Security research. Proof-of-concept files, vulnerability disclosures and defensive tooling are allowed if labelled and not actively harmful.
  • Cryptography and dual-use software. Allowed; we don't restrict open-source crypto.
  • Political speech and journalism. Allowed and protected. We don't moderate based on viewpoint.
  • Critical commentary, satire and parody. Allowed.
  • Adult educational content (e.g. anatomy textbooks, harm-reduction guides). Allowed.

Block contestation

If your upload is blocked and you believe it's a false positive, use the Request review button on the block screen. You'll see the reason category, write a short explanation ("why I think it's safe", up to 500 characters), and provide an email for the response. A human moderator reviews each contestation; most cases are decided within 24 hours. Approved files unlock automatically and the URL goes live on the slug you originally claimed.

Reporting abuse

Visit /report-abuse with the URL you want to report. You'll be asked for the URL, the reason (one of the categories above), an optional description, and an optional email if you want a follow-up. Severe categories (CSAM, immediate threats, active malware distribution) trigger a Discord alert to the admin team and are typically actioned within minutes.

If you're a brand owner and need to file a copyright takedown, email legal@publr.host with the URL, evidence of ownership and the specific work being infringed.

Repeat offenders

Accounts with three or more confirmed violations within a rolling 30-day window are suspended pending review. Accounts confirmed to be distributing CSAM, malware or active phishing scaffolding are terminated immediately and reported to law enforcement.

Questions?

Edge-case content question? Email legal@publr.host. We'd much rather answer up front than block on upload.