For definitions of capitalized terms, see “how are terms defined” below.
What uses of Cloud Services do we like?
The purpose of Wikimedia Cloud Services is to make it easier for developers, system administrators, and other technical contributors to:
- try out improvements to Wikimedia infrastructure, including MediaWiki;
- run bots;
- do analytics; and
- create other projects related to a Wikimedia Project or to MediaWiki software development or testing.
You agree that your projects on Wikimedia Cloud Services will be related to these purposes. Consult with the Cloud Services administrators or the cloud mailing list if you would like to verify whether your project is within the scope of Wikimedia Cloud Services.
What uses of Cloud Services do we not like?
You agree not to use Wikimedia Cloud Services for any of the following (“Prohibited Uses”):
- Illegal or harmful activity: Do not break the law. This includes, but it is not limited to, accessing other systems without authorization, accessing private data without authorization, harassing or abusing others, engaging in fraud, trafficking in unlawful material, or distributing unsolicited commercial email (spam), viruses, malware, or other malicious code.
- Misuse of Private Information: Do not collect or misuse private information of users, as defined in “Private Information”, below.
- Proprietary software: Do not use or install any software unless the software is licensed under an Open Source license.
- Proprietary content: Do not use or create content unless it complies with the Wikimedia Licensing policy. This includes content in the public domain or freely licensed under an applicable free culture license, such as the Creative Commons Attribution ShareAlike 3.0 license.
- Using Wikimedia Cloud Services as a network proxy: Do not use Wikimedia Cloud Services servers or projects to proxy or relay traffic for other servers. Examples of such activities include running Tor nodes, peer-to-peer network services, or VPNs to other networks. In other words, all network connections must originate from or terminate at Wikimedia Cloud Services. An explicit exception for Github Actions has been granted, with conditions. See T260746 for details.
- Disruptive or abusive activity: Do not interfere with other users’ projects, by being respectful of system and network resources.
- Use of Wikimedia Logos: Do not confuse users by using Wikimedia logos on web pages, or otherwise running sites that don’t properly explain that they are not official Wikipedia Projects. Use the Wikimedia Cloud Services logo instead! For more on avoiding user confusion, see the section on running test wikis below.
- Use of Wikimedia's LDAP server for authentication: Even with end-user notification that is required for any service that handles passwords or other sensitive data, use of any of the Wikimedia LDAP servers which contain Developer account information for password authentication from within the Cloud Services environment is strictly prohibited.
Exceptions to this list of prohibited uses can be requested for limited circumstances, such as testing compatibility with proprietary software. To request an exception, please submit a proposal to the Cloud Services administrators.
What happens if I violate this policy?
If you violate this policy, such as by using Cloud Services for one of the prohibited uses, your Cloud Services account, or any projects you run on Cloud Services, can be suspended or terminated. If necessary, the Wikimedia Foundation can also do this in its sole discretion.
What other things do I agree to?
- That we can add, change, or discontinue the features or services in Wikimedia Cloud Services.
- That by submitting content to Wikimedia Cloud Services, you consent to transfer and processing of that content in the United States of America.
- That we can notify you of changes to this policy by emailing the Wikimedia cloud mailing list.
- That we can contact you for purposes related to Wikimedia Cloud Services at the email address you gave us when you registered.
- That if you seek to file a legal claim against us, you will file and resolve it exclusively in a state or federal court located in San Francisco County, California. You also agree that the laws of the State of California and, to the extent applicable, the laws of the United States of America will govern these terms, as well as any legal claim that might arise between you and us (without reference to conflict of laws principles). You agree to submit to the personal jurisdiction of, and agree that venue is proper in, the courts located in San Francisco County, California, in any legal action or proceeding relating to us or these terms.
What can and can’t be done with user information?
You should not collect or store private data or personally identifiable information, such as user names, passwords, or IP addresses (“Private Information”) from the individuals using your Cloud Services Project (“End Users”), except when complying with the conditions listed below. To avoid violating this policy, and to avoid causing confusion or misunderstandings for users, we recommend that you do not collect any Private Information. Only collect information if the purpose of the Cloud Services Project unavoidably requires such collection. If you do collect any Private Information, you must:
- Clearly communicate to End Users a) that Private Information is being collected, b) how you will use it, and c) when you will delete it;
- Inform the End Users that their information may be available to the Wikimedia Foundation, its volunteers, other Wikimedia Cloud Services users, or to the public;
- Get express authorization from the End Users for the collection;
- Hash, encrypt, or otherwise properly secure any Private Information you store;
- Purge, anonymize, or aggregate any Private Information you store no more than 30 days after storing it;
- Not share any Private Information outside of your Cloud Services Project; and
- Not store any End User’s Wikimedia Project passwords.
Collecting any Private Information without complying with these requirements is a prohibited use and is grounds for account termination.
What should I do to avoid confusing users when running a test wiki?
If your Cloud Services Project includes a publicly accessible wiki, you must ensure that it is not confusingly similar to a Wikimedia project. For example, you should include a prominent disclaimer that it is a test project (see a sample disclaimer below), set the robots.txt file to disallow indexing in a search engine, and use Cloud Services logos instead of Wikimedia logos. We can require that you modify your Cloud Services Project or suspend your account if we receive complaints that End Users have been confused by the appearance or operation of your Cloud Services Project.
What information should I provide to users?
If my tools have account creation...
If End Users of your Cloud Services Project are allowed to create accounts, you must display this disclaimer on your Cloud Services Project during the account creation process:
If my tools collect Private Information...
If you collect any Private Information from End Users, you must display this disclaimer to the End Users before you collect the Private Information:
If my tools include a beta or test wiki...
If you run a beta or test wiki, you must display this notice on the wiki (such as in the footer):
What disclaimers does the Foundation want to make?
While the Foundation obviously wants to make Cloud Services as reliable and robust as possible, all software is imperfect, and we also provide Cloud Services to you at no charge. As a result, we can’t be responsible if something goes wrong. In more formal legal language, this means:
Wikimedia Cloud Services may be used as a testing or development environment, so all your use of Wikimedia Cloud Services is at your sole risk. We provide Wikimedia Cloud Services on an “as is” and “as available” basis, and we expressly disclaim all warranties of all kinds, including implied warranties of fitness for a particular purpose, merchantability, and non-infringement. We make no warranty that Wikimedia Cloud Services will meet your requirements, be safe, secure, or uninterrupted.
We are not responsible for the content, data, or actions of third parties, and you release us, our directors, employees, and agents from any claims and damages, known and unknown, arising out of or in any way connected with any claim you have against such a third party.
How are terms defined?
In this document, when we say “Wikimedia Cloud Services”, we mean content or services hosted on wikitech.wikimedia.org, wmflabs.org, or a subdomain of wmflabs.org.
When we say a “Cloud Services Project”, we mean the virtual environment that your account on Wikimedia Cloud Services allows you to use.