What can be on Velven.

• Sexual content. Nudity, sexual acts or sexually suggestive material, and anything that sexualises minors.
• Scams and phishing. Pages that trick people out of money or information: fake giveaways, fake prizes, fake support.
• Forms that collect credentials. Sign-in, password, payment card, or wallet seed and private key forms. A space that needs players to sign in uses Sign in with Velven.
• Malware. Code that downloads or runs anything harmful, mines cryptocurrency on a player's device, or attacks the browser.
• Real-money gambling. Betting, casino games or lotteries played for money, cryptocurrency or anything that can be cashed out. Play money that never leaves the game is fine.
• Wallet drains and crypto schemes. Asking players to connect a wallet or sign transactions, token sales and pump schemes.
• Hate. Content that attacks or demeans people for their race, ethnicity, national origin, religion, disability, sex, gender identity, sexual orientation, age or another protected characteristic.
• Threats and harassment. Threatening, harassing or encouraging harm against a real person, or promoting self-harm. Fictional combat in a game is fine.
• Impersonation. Passing a space off as another game, studio or brand, using their names, logos or look to mislead, or pretending to be a person or Velven.
• Illegal content. Anything it is illegal to publish or offer, and anything made to help someone break the law.
• Stolen work. Someone else's game, code, art, music or other work used without their permission.
• Private information. Other people's personal details posted without their consent.

To report stolen work, follow the takedown page.

Every version published to Velven's hosting is checked before it goes live. Velven opens it in a browser, takes a capture of what a player sees, and a model judges the capture against these rules, looking for sexual content, scams, sign-in or wallet forms and gambling. Its address may also be checked against a list of known malware and phishing. A page published without an account is checked the same way before it goes live. A preview is private and goes live only when you make it live, which starts the check; the rules apply to a preview all the same. There are three outcomes:

• Live. The version replaces the one players had.
• Refused. The version stays off, with the reason shown in the CLI and the space's Files tab, and the live version, if there is one, stays as it was. Fix it and publish again, or press Ask for review and a person at Velven looks at it.
• Could not judge. The capture showed a black screen, a loading screen or a start screen that was never passed. The version stays off with what the capture showed. Add a start hint to velven.json, such as "start": { "click": "Play" }, and publish again, or ask for review.

A space linked at its own address may be checked against the same malware and phishing list when it is listed and on Velven's regular visits, and a change Velven sees on its page gets the same safety check. Automated checks can be wrong either way: passing one does not make a space immune from review.

Anyone can report a space with Feedback on its page, unlisted and unclaimed pages included, and a comment, chat message or uploaded item from where it is shown. Reports go to the Velven team, not to the creator.

When three different signed-in people report a space as offensive, or as malware or a scam, it is hidden until someone at Velven reviews it; for a space that is new or changed in the last seven days, two are enough. Reports sent without signing in are read by the team but never hide a space on their own. After review, the space comes back or is removed. A space Velven reviewed and kept is not hidden again by reports for 30 days.

Velven removes what breaks these rules. Depending on how serious it is and whether it has happened before, Velven may also remove the creator's other spaces, take away a handle, or close the account and refuse new ones. The address of a removed space can be blocked from being listed again.

Malware, scams, credential or wallet forms, and anything sexualising minors lead to closing the account at once. A page published without an account that breaks these rules is removed. Material sexualising minors is also reported to the National Center for Missing & Exploited Children.

If you believe Velven got a decision wrong, press Ask for review on a refused version, or write to dmca@velven.ai with the link and why.