Acceptable Use Policy

Last updated 5 August 2026

ComeAndGo is private and temporary by design. Those properties attract people who want to misuse them, so the rules here are short and we enforce them.

Never

• Child sexual abuse material. We report it to the relevant authorities and preserve the evidence, as the law requires. There is no ambiguity and no appeal.
• Anything else illegal where you or your recipients are.
• Malware, phishing, credential theft, or fraud.
• Threats, harassment, stalking, or targeting a private individual.
• Sharing someone else's private information without their consent.
• Spam, bulk unsolicited messaging, or automated mass workspace creation.
• Attempting to break, overload, or circumvent the service's limits or protections.

Pictures

Pictures you send are yours to answer for, in any workspace, whoever opened it. Everybody entering a workspace agrees to that before coming in, and anybody who has not — a session that predates the box — is never shown a picture unasked. The rules above apply to pictures exactly as they apply to words, and the first of them applies hardest.

Reporting

Every workspace has a Report button, and it works without joining the workspace — you do not have to enter a room to report it. Reports can also be sent to hello@thatwhy.me.

Filing a report preserves a copy of that workspace's contents for up to 90 days so it can be reviewed. That copy is not destroyed when the timer ends. This is stated on the report form itself, because it is a genuine exception to the promise the rest of the product makes. Please only report real problems.

What we do about reports

We review reports and may destroy a workspace immediately, block the source, and where the law requires, report the material and preserve it for the authorities.

ComeAndGo is run by one person. Reports are read and acted on, but there is no guaranteed response time, and there are hours when nobody is watching. We would rather state that than promise a service level we cannot keep.

What we cannot do

Once a workspace's timer ends, its contents are destroyed and we cannot retrieve them — including for an investigation. If something needs to be preserved, it must be reported while the workspace is still alive.