Illegal Links & Malware Policy

Purpose and scope

This Policy applies to every Gateflow protected link, destination, fallback URL, redirect chain, public page, uploaded asset, account and API request. Publishers must not use Gateflow to create, distribute, conceal, facilitate or promote illegal content or harmful technical activity.

Illegal content means information, goods, services or activity that violates applicable law. Prohibited harmful use is a separate contractual standard and includes malware, phishing, deception and unauthorised access even when no court or authority has yet determined that the conduct is illegal. A link can violate this Policy because of its destination, redirect chain, surrounding campaign, behaviour or intended use, even if the visible Gateflow URL appears harmless.

Illegal content and activity

Gateflow prohibits links that direct to, facilitate or promote illegal content or activity. Depending on the applicable law, this includes:

• child sexual abuse, child sexual exploitation, grooming or sexualised content involving minors;
• terrorist content, recruitment, operational instruction, credible threats or unlawful incitement to violence or hatred;
• trafficking, exploitation, stalking, unlawful harassment or non-consensual intimate material;
• fraudulent stores, investment or payment scams, identity theft, impersonation, stolen credentials or unlawfully obtained data;
• unlawful sale or supply of controlled, counterfeit, stolen or otherwise prohibited goods or services;
• infringement of copyright, trade marks, privacy, data-protection or other third-party rights; and
• unauthorised access to systems, interception, data theft, interference with networks or any other activity unlawful in the relevant territory.

These examples are not exhaustive. Lawful educational, journalistic, artistic, documentary, research and defensive-security material is not prohibited merely because it discusses harmful activity. That context never permits active malicious payloads, credential collection, operational abuse or intended harm.

Malware, phishing and harmful technical activity

You may not use Gateflow for:

• malware, ransomware, spyware, credential stealers, keyloggers, trojans, botnets, cryptominers or other malicious code;
• phishing, deceptive login or payment pages, brand impersonation, fake support, or collection of passwords, session tokens, payment data or other sensitive information under false pretences;
• exploit kits, drive-by downloads, malicious scripts, harmful extensions or applications, command-and-control, payload staging or data exfiltration;
• malvertising, forced redirects, browser-locking, scareware, deceptive download buttons or software installed without informed consent;
• cloaking, rotating destinations, nested redirect chains, compromised websites or other techniques intended to evade review; or
• probing, exploiting, disrupting or accessing Gateflow or third-party systems without authorisation.

Gateflow may use provider alerts, external threat intelligence, automated signals and human review. A signal is not treated as infallible: false positives and false negatives are possible, and eligible decisions can be appealed.

Publisher responsibilities

Publishers must have the right to share each destination and must check both the initial URL and every redirect they intentionally configure. They must keep destinations under reasonable control, respond to security warnings, remove compromised links promptly and ensure that titles, branding and calls to action accurately describe the experience.

Publishers must not hide the true destination, reactivate a removed campaign through another account or slug, encourage users to ignore browser warnings, or use Gateflow to bypass another service's security, access or moderation controls. Saving or updating a link confirms that it complies with this Policy.

How to report a link

Anyone can report suspected illegal content or harmful activity free of charge. Use Report page on the relevant protected link, submit the Trust & Safety form, or email contact@coinforgecapital.net.

Include the exact Gateflow URL, the category of concern, a clear explanation, relevant country or jurisdiction if known, timestamps and non-harmful supporting information. Include contact details if you want a reply. Do not submit passwords, recovery codes, private keys or live malicious files.

For suspected child sexual abuse or exploitation, provide only the Gateflow URL and necessary context. Do not download, copy, screenshot or attach the material. Reports of this kind may be made without identifying the reporter.

Review and prioritisation

Gateflow aims to assess sufficiently detailed reports in a timely, diligent, objective and non-arbitrary manner. Priority is given to imminent threats to life or personal safety, active malware or credential theft, suspected child sexual abuse material, valid orders from competent authorities and other cases presenting a high risk of serious harm.

Review may consider the content, context, technical behaviour, available evidence, affected territory, severity, recurrence, user rights and whether a narrower protective measure would be effective. Gateflow does not promise continuous monitoring of every destination and an accessible link is not a safety certification or endorsement.

Protective and enforcement action

Depending on the evidence and risk, Gateflow may warn users, stop a redirect, pause or remove a link, block a destination or domain, restrict a link by territory, suspend link creation or API access, place abuse-related earnings or payouts under review, restrict an account, terminate repeated or serious abuse, prevent recreation, preserve relevant evidence, or notify providers and competent authorities where permitted or required by law.

Gateflow may take immediate interim action when reasonably necessary to prevent imminent or substantial harm. Final measures should be proportionate to the evidence, seriousness, recurrence and impact. Action against one link does not automatically require action against unrelated lawful links, unless account-wide or coordinated abuse is identified.

Decision notices and appeals

Where required and legally permitted, Gateflow will give the affected publisher a reasoned notice describing the action, its scope and duration, the relevant facts or contractual ground, whether automated signals contributed, and available appeal options. Limited information may be withheld when disclosure is prohibited, would expose a reporter unnecessarily, compromise an investigation or materially help an attacker evade controls.

An affected publisher, and where applicable a reporter, may appeal free of charge through the moderation appeal form. Include the Gateflow URL or decision reference, why the decision should change and supporting evidence. Eligible appeals are reviewed by appropriately qualified personnel and are not decided solely by automation. Judicial and other mandatory redress rights remain available.

Repeat and serious abuse

Gateflow may take stronger action against repeated, coordinated or manifestly serious violations. When appropriate and required by applicable law, a warning will be issued before an account is suspended for repeatedly providing manifestly illegal content. Gateflow may still take immediate protective action for a separate serious violation, urgent safety risk or binding legal order.

After a warning and proportionate review, Gateflow may also limit notices or appeals that are repeatedly and manifestly unfounded. Good-faith mistakes, legitimate criticism and unsuccessful reports do not by themselves constitute abuse.

Evidence, privacy and disclosure

Gateflow may preserve available records reasonably necessary to investigate abuse, protect users, prevent fraud, establish or defend legal claims, or comply with a valid preservation or production order. These may include protected and destination URLs, redirect history, timestamps, account and transaction identifiers, relevant technical logs, reports, threat indicators, decisions and appeals.

Preservation does not mean automatic disclosure. Information is disclosed only with a valid legal basis and subject to applicable requirements concerning authenticity, scope, necessity and proportionality. Access is restricted, retention is limited to what is reasonably necessary and personal data remains subject to the Privacy Policy. A lawful legal hold may temporarily override routine deletion.

Emergencies and competent authorities

Gateflow is not an emergency service. If someone is in immediate danger in the European Union, call 112 or contact the relevant local emergency service. After contacting emergency services, an urgent Gateflow report should include the exact URL, nature of the threat, affected territory and safe contact details.

Binding orders and lawful requests from judicial, law-enforcement or administrative authorities are assessed through the applicable legal process. Gateflow may notify competent authorities when required or permitted by law, including when available information creates a legally relevant suspicion of a criminal offence involving a threat to life or safety.

Changes and contact

Gateflow may update this Policy to address legal, technical or operational developments. Material changes will be reflected by a new effective date and, where required, an additional notice.