LegalAcceptable Use Policy

Last updated: 26 October 2026

This policy explains how MariHost's hosting and email may be used, so the servers stay fast, secure and trusted for every customer. It's part of our Terms of Service. MariHost is a trading name of Berkat Ltd.

1. Fair use of your plan

Every plan has clear limits, shown on its plan page and in your order. We never sell "unlimited" anything, because nothing is.

• Websites, storage and databases: up to the number and size your plan includes. Storage is shared by your websites, their staging copies, databases and mailboxes.
• Files: each website can hold up to 300,000 files. That's about twice what a busy WordPress site with thousands of images uses; if your site genuinely needs more, ask us.
• Bandwidth: the data your websites send to visitors each month, up to your plan's cap. It resets each month. If your websites reach the cap, they keep working but are slowed down until it resets, or until you move to a bigger plan.
• CPU and memory: each website can use up to the CPU and memory its plan page shows. If a site needs more, it slows down rather than slowing down other customers' sites, and we'll suggest a bigger plan.
• Busy sites: if your visitors are far from Singapore, or your site gets heavy traffic, put a CDN such as Cloudflare or MariCDN in front of it.

2. Email

When your plan includes email:

• You get one mailbox for each website your plan includes, each holding up to 1 GB of your plan's storage.
• Each mailbox can send up to 50 emails an hour. Mail over the limit is refused, and you'll see an error.
• Each website can also send up to 50 emails an hour itself, only for messages that people trigger, such as password resets, order confirmations and contact form messages. Never use it for newsletters or marketing.
• Email is for everyday business and personal mail. Newsletters, marketing campaigns and other bulk mail aren't allowed: use a mailing service for those.
• Only send to people who expect your email. Bought or rented lists aren't allowed.
• Mail must be sent from your mailbox with its password (authenticated), or by your websites through their normal forms and shops. Contact forms must have spam protection, such as Cloudflare Turnstile.
• Outgoing mail is checked for spam and malware. We may hold or block mail that looks like spam, and pause a mailbox that suddenly sends a lot of mail, because that's usually a sign it's been hacked.

3. What isn't allowed

You must not use our services, or let anyone else use them, to:

• send spam, or advertise a website or service through spam sent from anywhere;
• run phishing pages, scams, fake shops or anything designed to deceive people;
• host, send or spread malware, viruses or hacking tools;
• host or share anything illegal in the UK or in Singapore, where our servers are, including sexual content involving minors and content that promotes terrorism or violence;
• infringe someone else's rights, such as copyright, trade marks or privacy, including pirated software, films or music;
• attack other systems: denial-of-service attacks, port scanning, brute-force logins, or trying to break into other accounts or servers;
• get around our security or limits, or interfere with other customers' sites or with our servers;
• mine cryptocurrency;
• run open proxies, VPN or Tor exit nodes, IRC servers or game servers;
• run long-running background programs (scheduled tasks are fine, as often as once a minute);
• use your storage as a file locker, download mirror, media streaming service or backup store for anything other than your own websites and email.

4. Keeping your sites secure

Most hacked sites are hacked through out-of-date software or weak passwords. Please:

• keep WordPress, plugins and themes up to date (or let WordPress Care do it);
• remove plugins and themes you don't use;
• use strong, unique passwords and two-factor login where you can;
• only give logins to people who need them, and remove them when they don't.

5. What we do if this policy is broken

We try to work with you. Usually we'll tell you what's wrong and give you time to fix it, then limit the service if it continues, and suspend or end it as a last resort.

If something is causing harm right now, such as spam going out, malware, a phishing page, an attack, or a site putting the server or other customers at risk, we act straight away: we may block the mail, disable the site or file, or suspend the account, and then tell you what we did and why.

Serious or repeated breaches can end your service without a refund, and the money-back guarantee doesn't apply. Where the law requires it, we report illegal content to the authorities.

6. Reporting abuse

To report spam, phishing, malware, an attack or illegal content coming from a site or server hosted by MariHost, email [email protected]. Please include the website address or IP address, what happened and when, and for spam, the full email with its headers. We review reports within 2 business days, and sooner for active attacks and phishing.

Copyright and other rights complaints can be sent to the same address. Tell us what's infringing, where it is, and why you have the right to complain.

7. Changes to this acceptable use policy

We may update this policy, for example when we change our email limits. If a change is important, we'll email customers before it applies. The date at the top shows the latest version.