What to report
Phishing. A page that imitates a sign-in, a bank or a payment form to collect credentials or money.
Malware. A page that serves or links to software meant to harm the people who run it.
Spam and scams. Pages published in bulk to push links, fake offers or search rankings.
Harassment. Content that threatens or targets a person, or publishes someone's private information without their consent.
Illegal or infringing content, including impersonation of a person or organization. The full rules are in the terms of service.
How to report
Use the flag on the space. Open it and choose Report this space in its header, or go to spacesheep.dev/report/<space-id> — the id is in the space's URL. No account needed.
Or write to support@spacesheep.dev with the space URL — it looks like https://<id>.spacesheep.app or https://spacesheep.dev/space/<id> — and a sentence or two on what's wrong.
Anything urgent — active phishing, child sexual abuse material, a legal notice — goes to that address. Active credential harvesting is actioned ahead of the queue.
What happens next
Every report is read by a human and typically acted on within one business day.
A suspended space stops serving immediately, and its owner is told why. The account behind it can be suspended too.
Owners can appeal a suspension by writing to the same address.
Security issues
A vulnerability in the platform itself, rather than in a user's space, can go to the same address. Please give us a reasonable window to fix it before publishing details. How we protect spaces and accounts is on the security page.