Publishing rules

Version 2026-10-10. These rules apply to everything published with edeck.me: the accounts of those who create sites (the "owner") and all the content of their sites —texts, images, products, links, forms, emails sent from them, custom domains and the content generated with the panel's artificial intelligence, which is the owner's content for all purposes—. They must be accepted to create a site, and breaching them allows edeck.me to remove content, suspend sites and block accounts as explained in section 6. Section 11 also sets out the personal data processing that edeck.me carries out on the owner’s behalf.

1. What can be published

edeck.me is meant for websites and online shops of businesses, professionals, freelancers, associations, personal projects, portfolios and blogs that offer lawful products, services or information. The owner is solely responsible for what they publish and for complying with the regulations that apply to their activity.

2. What is prohibited

Nothing of what follows may be published, linked, sold, offered or promoted, and the site may not be used to facilitate it. Each section has a code (N1, N2…), which is the one quoted in notices and decisions.

N1. Child sexual abuse

Any content that sexualises minors, whether real, drawn or computer-generated, or that facilitates their exploitation or contact with them for sexual purposes. Zero tolerance: immediate blocking of the account and all its sites, preservation of the evidence and report to the authorities.

N2. Sexual and adult content

Pornography and any sexually explicit content, in images, video, text or links.
Sexual, escort or sex-dating services, erotic webcams and the sale of erotic content (subscriptions, packs, "exclusive content").
Nudity with a sexual purpose, even if partially covered or pixelated.
Intimate content of another person shared without their consent, or created or manipulated (including AI-generated images, "deepfakes") to show them in sexual situations.

Allowed, without explicit images: lingerie, swimwear, sexual health and education, and art or information without a sexual purpose.

N3. Fraud, scams and deception

Impersonating another person, company, brand, bank or public body, or imitating their website ("phishing"), and deceptively asking for passwords, bank or card details.
Fake shops or shops that take payment with no intention of delivering; made-up prices, stock, delivery times or features.
Pyramid or Ponzi schemes, promises of easy or guaranteed earnings, investments, crypto-assets or financial services without the authorisation required by law.
Fake giveaways, prizes or gifts; made-up or bought reviews, ratings or testimonials.
Counterfeit products or replicas of registered trademarks.
Sale of fake degrees, official documents, prescriptions, certificates or identities, and of accounts, personal data or databases obtained without consent.

N4. Malware and technical abuse

Viruses, trojans, spyware, ransomware, cryptocurrency miners or any code that runs on the visitor's device without their knowledge or will.
Phishing kits or pages, deceptive redirects, disguised downloads and links that hide their real destination.
Unsolicited bulk email (spam), also through the site's forms; search engine spam (doorway pages, link farms, hidden text, copied or mass-generated content made only for ranking).
Using the site or the platform to attack, scan or overload other systems; trying to access data or sites of other owners; circumventing the limits, billing or security measures of edeck.me.
Using the site only as file storage, a download server, a URL shortener or a redirector to other websites.

N5. Illegal or dangerous products and services

Drugs and narcotics, including "new psychoactive substances", and paraphernalia presented for consuming them.
Prescription medicines, doping substances and medical devices without the required authorisation; remedies that claim to cure serious diseases.
Firearms, their parts and ammunition, explosives, unauthorised fireworks, and instructions to make or modify them.
Gambling, betting, casinos, lotteries and paid raffles without the corresponding licence.
Protected species, their parts or derivatives; stolen goods or goods of unlawful origin.
Hacking services, spying on devices or accounts, or breaching third-party systems.

Alcohol, tobacco, vaping products, CBD and other regulated products may only be sold if the owner complies with the regulations that apply to them (licences, labelling, age verification, ban on sales to minors) and proves it to us when asked.

N6. Hate, violence and terrorism

Inciting hatred, discrimination or violence against people or groups because of their origin, ethnicity, nationality, religion, sex, sexual orientation, gender identity, disability, age or any other personal circumstance.
Glorification, propaganda, recruitment or financing of terrorism or violent extremism.
Threats, harassment, humiliation or publishing a person's details to target them ("doxxing").
Graphic violence or cruelty to people or animals shown to shock or to celebrate it.
Promoting suicide, self-harm or eating disorders.

N7. Third-party rights

Texts, images, videos, music, fonts or software the owner has no rights to; copies of other people's websites.
Distributing or linking to pirated content: films, series, live sports, IPTV, software or keys without a licence.
Using other people's trademarks, trade names or domains in a way that may mislead about who is behind the site.
Personal data of third parties published without a legal basis, and images of people —especially minors— without their consent or that of their representatives.

N8. Harmful false information

Deliberately false information that may cause real harm: about health and treatments, about emergencies or disasters, or to manipulate elections.

N9. Owner's details and obligations

Providing false account or billing details, or someone else's, or creating accounts to circumvent a block.
Collecting visitors' data (forms, orders, sign-ups) without informing them or processing it in accordance with the General Data Protection Regulation.
Selling without stating who sells, the total price, delivery costs, the right of withdrawal and how to complain, as required by consumer and e-commerce law (in Spain, the LSSI).
Transferring, selling or renting the account or the site to third parties so that they publish what these rules prohibit.

N10. Any other illegal content

Any content or activity contrary to Spanish law, European Union law or the law of the country the site is aimed at, even if it is not in the list above, and anything an authority or a court orders us to remove.

3. Content generated with artificial intelligence

The texts, images and designs the panel generates with AI are a proposal: the owner must review them before publishing and is responsible for them like for any other content. The panel's AI may not be used to try to produce anything prohibited in section 2.

4. Content review

edeck.me does not review what is published in advance and is not obliged to, but it may review at any time, automatically or manually, any site that is published or being prepared, especially when it receives a report or detects signs of abuse. Content not having been removed does not mean it is allowed.

5. How to report a site

Anyone can tell us about a site that breaches these rules or the law by writing to abuse@edeck.me. So that we can act, please include:

the exact address (URL) of the content;
which rule or right is breached and why;
your name and email, except for reports of child sexual abuse, which may be anonymous;
if you hold an affected right (for example, copyright or a trademark), a statement that the information is accurate and given in good faith.

We acknowledge receipt, review the report diligently and let the person who made it know our decision, as set out in Regulation (EU) 2022/2065, the Digital Services Act.

6. Measures for breaches

Depending on the seriousness, repetition and risk for visitors, other owners or the platform, edeck.me may apply one or more of these measures:

Notice to the owner, stating the rule breached and a deadline to fix it, usually 72 hours.
Removal or disabling of the specific content (a page, a product, an image, a form).
Site suspension: the site is no longer visible on the internet —at its edeck.me address and on its custom domain— and a suspended-site notice is shown instead. The owner can still sign in to the panel to fix it, unless the account is also blocked.
Account block: the owner cannot sign in to the panel or create sites, and all the account's sites are suspended.
Permanent termination: the account and its subscriptions are cancelled, and the content is deleted after the retention period, except what we must keep as evidence or by law.
Report to the authorities when there are signs of a crime or the law requires it.

Without prior notice, the site is suspended or the account blocked in the cases of sections N1, N3 and N4, of terrorism (N6), when there is an immediate risk for visitors or the platform, and when an authority or a court orders it. Accounts created or used to circumvent a previous block, and those sharing identification details, payment details or domains with it, are blocked too.

Every decision is sent to the owner by email with the measure applied, the facts, the rule it is based on and how to appeal, unless the law or an order from the authorities prevents it.

7. Effects on payments

A suspension or block for a breach does not stop the subscription by itself; the owner can cancel it from the panel at any time. If edeck.me terminates the account for a serious or repeated breach, amounts for periods already invoiced are not refunded. If the measure is lifted because it is shown there was no breach, the service is restored and the time it was suspended is compensated.

8. Appealing a decision

The owner can ask us to review a measure by replying to the email in which it was notified, or by writing to abuse@edeck.me, within the following six months. The appeal is reviewed by a person other than the one who took the decision, and the answer is given in writing with its reasons. If the breach is fixed, the site can be reactivated.

9. Data we keep

We keep the acceptance of these rules (version, date, account, site and the IP address from which they were accepted), the reports received and the decisions taken, with evidence of the content removed, for as long as necessary to handle appeals and comply with legal obligations. More information in the edeck.me privacy policy.

10. Changes to these rules

We may update these rules to adapt them to the law or to new uses of the platform. Each version has its date. Substantive changes are announced to owners in advance and they are asked to accept the new version; the current text is always available in the panel and on edeck.me.

11. Data that edeck.me processes on the owner's behalf

For the personal data of the visitors and customers of their site, the owner is the controller and edeck.me is their processor, under Article 28 of the General Data Protection Regulation (GDPR). By accepting these rules, the owner entrusts edeck.me with that processing on the terms of this section.

Subject matter and duration: hosting and serving the site; storing what its forms, orders and customer accounts collect; sending the site's emails, and measuring its visits. It lasts as long as the site is on edeck.me.
Data and data subjects: the data the owner and the people who use their site enter on it (for example, identification, contact details, address, orders and messages) and the browsing data of the audience measurement described below. Data subjects: the site's visitors, customers and contacts.
Audience measurement: edeck.me counts each site's visits with Umami, hosted on its own servers, with no cookies and nothing stored on the visitor's device. The IP address and browser are used on the spot to work out the approximate country, region and city and a pseudonymous visitor code that changes every month and is different on each site; the IP address is not stored. The pages viewed, the referrer, the campaign parameters of the address, the browser, operating system, device type, screen size and language are recorded. Statistics are kept for a maximum of 25 months. The owner sees them in their panel. The cookie and privacy texts the panel generates explain this to visitors; if the owner uses their own texts, they must include this information.
Instructions and purpose: edeck.me processes this data only to provide the service, following the owner's instructions, which are those given by setting up and using their site. It does not use it for its own purposes or disclose it to third parties, unless required by law. To run and improve the service it only uses aggregated figures per site (for example, total visits), which identify nobody.
Confidentiality and security: the people authorised to process the data are bound by confidentiality. edeck.me applies technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), passwords stored irreversibly, separation of each site's data, two-factor authentication in the panel and restricted access to the server.
Sub-processors: the owner authorises edeck.me to use IONOS SE, which provides the server and email from the European Union, as a sub-processor. edeck.me will notify the owner of any change of sub-processor sufficiently in advance for them to object, and will impose on them the same obligations it assumes in this section. Services the owner signs up for and connects on their own (payment gateways, Google Analytics or others) are the owner's relationships with those providers, not sub-processing by edeck.me.
Assistance: edeck.me will help the owner, as far as possible, to respond to data subjects exercising their rights and to meet their obligations on security, personal data breach notification and impact assessments, and will notify them without undue delay of any security breach affecting their site's data.
End of the processing: when the site is permanently deleted, edeck.me deletes its data, including its visit statistics, except data it must keep by law. Before deleting it, the owner can ask for a copy of their site's data.
Compliance: edeck.me will make available to the owner the information needed to demonstrate compliance with this section, will allow audits where appropriate, and will tell the owner if it considers that one of their instructions infringes data protection law.