Service terms

Intended use

Blindport is built for self-hosters who want easier public reachability and less exposure of their origin address. Framed products provide ingress to selected services. Routed Blindport IP assigns one static public IPv4 address to a WireGuard interface for inbound and outbound traffic without network address translation.

The network path can still expose information because application behavior, DNS history, headers, or third-party integrations may reveal an origin address.

Routed Blindport IP is prepaid for 365 service days. The address remains assigned for the active paid term unless renumbering is technically, legally, or operationally unavoidable. You receive a right to use the address, not ownership of it.

You are responsible for traffic through your endpoint, the service behind it, account and host security, users, content, backups, and compliance with applicable law.

Best-effort beta

The hosted beta is provided on a best-effort basis without an uptime, availability, or high-availability guarantee. Relay and Port use two provider edges to improve resilience for new connections, but DNS does not perform health steering and established sessions do not migrate. A routed dedicated IP is assigned by one provider and becomes unavailable during that provider's outage. The hosted website and control plane currently run at one provider. High availability is planned after beta, but planned work is not a promise about the current service.

When the control plane is unreachable, a previously issued signed Relay or Port authorization may remain usable until its bounded grace timestamp. This grace is a reachability safeguard, does not extend the paid service term, and does not override a successful online denial.

Traffic and fair use

There is currently no fixed traffic limit. This is a fair-use service, not a promise of unlimited capacity.

We may introduce reasonable traffic, bandwidth, connection, or rate limits when needed to keep the service reliable and available. We will publish material limits before they apply when practical. Urgent limits may be applied immediately to contain abuse, instability, security incidents, or harm to other users.

Outbound email

New outbound TCP connections to port 25 are blocked on routed Blindport IP by default. Ports 465 and 587 are not covered by this default block.

A port 25 exception requires contacting support, review of the intended use and technical safeguards, and an additional nonrefundable fee of at least 33333 sats. Approval is discretionary, applies only to the current IP lease, and may be revoked immediately after spam, a material change in use, inaccurate review information, or an unresolved abuse report.

Source addresses and logs

Blindport does not persist visitor or request source IP addresses, traffic destinations, DNS queries, or payloads in application records. Addresses are processed transiently where required to route active traffic and enforce network policy. Blindport retains durable account-to-IP lease history, lease state and timestamps, SMTP review and revocation records, subscriptions, account activity times, and payment records as necessary to provide and protect the service.

Hosted access logging is disabled. Blindport operational logs omit visitor and request source addresses and are deleted within 30 days. Customer systems and independent network, hosting, DNS, certificate, payment, email, and monitoring providers are outside this retention commitment and may keep their own records. When you choose stablecoin checkout, the selected external provider receives the invoice you provide and can observe your selected asset, network, wallet activity, and swap transaction.

Payments, service time, and upgrades

Lightning and stablecoin checkout amounts, discounts, and service periods are fixed when a payment is created. A configured stablecoin checkout surcharge does not buy service time. When Lightning Swap requires a payment above the service price and surcharge, the additional provider-minimum amount earns proportional service time rounded up to a whole day.

Pay only before the checkout deadline shown by Blindport. A provider's Lightning invoice may remain payable longer. A payment first verified after the checkout deadline, or after the subscription becomes ineligible, requires manual review and does not automatically activate service. Verification may be delayed even when you paid before the deadline; contact support with your payment reference if this happens.

An active exact customer-owned Relay may be upgraded to a wildcard at the exact hostname's immediate parent. Remaining exact service is valued at the subscription's recorded monthly or annual daily rate, rounded down to satoshis, and capped at the selected wildcard term price. This credit is nonrefundable, cannot be transferred or exchanged for cash, and is consumed only when the wildcard activates. The exact route remains active until wildcard DNS is verified and payment settles, then it is replaced by the wildcard route.

Lawful use and upstream providers

You may not use Blindport for unlawful activity; child sexual abuse material or exploitation; phishing, fraud, credential theft, malware, ransomware, spyware, botnets, command and control, denial of service, unauthorized access or scanning, source spoofing, unsolicited messaging, illegal commerce, infringement, doxxing, threats, or deliberate resource or network-reputation abuse. You may not resell access as an open proxy or attempt to bypass network controls.

Blindport depends on network, hosting, DNS, and payment providers. We cannot prevent those providers from investigating use, filtering traffic, or suspending their services or Blindport infrastructure.

We may ask for a response and remediation within a stated deadline when a credible report includes the relevant address, timestamp, protocol, and evidence. We may rate-limit, filter, suspend, or terminate service immediately for an active attack, severe unlawful use, material risk, nonresponse, repeated violations, or an upstream requirement. We disclose only information we retain and only in response to valid binding legal process, unless emergency law permits otherwise.

Service suspended or terminated for prohibited activity is not eligible for a refund. Paid SMTP review fees are nonrefundable.

Address reputation and service limits

Public address reputation, geolocation, acceptance by third parties, and freedom from previous use are not guaranteed. Report a material preexisting reputation problem promptly; replacement remains subject to available inventory and review.

There is no backup of customer systems or application data. Expiration or termination removes network authorization and the address may be quarantined before reassignment. Established sessions may end without notice when authorization is removed.

Privacy and threat model

Blindport is privacy-enhancing network infrastructure, not an anonymity network or censorship-resistance system. Blindport and its providers can observe connection metadata such as addresses, ports or SNI hostnames, timing, and traffic volume. Payloads are opaque to Blindport only when your service uses suitable end-to-end encryption.

This architecture is not designed to resist a state-level adversary, targeted traffic correlation, legal compulsion, infrastructure seizure, or coordinated pressure on upstream providers. It is intended for ordinary lawful self-hosting where origin-address privacy and ease of use matter.

Operators who require anonymity or censorship resistance should evaluate tools designed for those goals, such as Tor onion services, suitable mixnets, or other specialized systems, against their exact threat model. We support the broader goals of privacy, anonymity, and censorship resistance; Blindport itself provides only the limited privacy benefits described above.

Changes

These beta terms may evolve as the service and its operating constraints become clearer. Material changes will be published on this page with a new effective date.