Acceptable use

For anyone deciding whether a planned use of Super Farm is one the project supports.

Super Farm is a tool for education, research, development and testing. This page lists the uses it is meant for and the uses that are not permitted. It complements DISCLAIMER.md and is not legal advice.

Intended uses#

Learning how Android containers, GPU rendering, VPN routing and UI automation work.
Developing your own apps and testing them across Android versions, screen sizes, locales and device configurations.
QA, regression and compatibility testing of apps and services you own, or that their owner has authorised you to test.
Accessibility research and automation research.
Network testing: how your app behaves on another route, behind a VPN, with no connectivity, or when a tunnel drops.
Operating your own apps on many instances, for example demos, kiosks or internal tools.

Before you start#

Answer these for every app and service a farm will touch:

Do you own it, or do you have the owner's permission to test it this way?
Do its terms of service allow automated use, emulated or containerised devices, and more than one account or instance?
Do the terms of your network and VPN providers allow this traffic?
Is the use lawful where you are and where the service operates?

If an answer is no or unknown, do not run it.

Not permitted#

Do not use Super Farm for any of the following.

Fraud of any kind, including ad fraud, click fraud, payment fraud and referral or bonus abuse.
Spam: unsolicited or bulk messages, comments, invitations or follow requests.
Fake or inflated engagement: views, watch time, followers, likes, installs, reviews or ratings that do not come from real people acting freely.
Creating or operating accounts in violation of a service's terms, including bulk account creation and accounts that pretend to be different people.
Evading bans, suspensions, rate limits, or fraud, abuse or bot detection.
Scraping or collecting data in violation of a service's terms or of data protection law.
Credential stuffing, password guessing, or any access to accounts, devices or systems without authorisation.
Harassment, stalking, intimidation or coordinated abuse of any person.
Impersonating a real person, device or organisation to deceive someone.
Evading geographic or legal restrictions that apply to you.
Distributing malware, or apps you have no right to distribute.
Disrupting, overloading or degrading any app, service or network.
Anything else that is unlawful where you are or where the affected system is.

What the features are for#

Device profiles and identity settings exist so that apps can be tested across device configurations. VPN support exists for network testing and privacy. Automation exists to test and operate your own apps. The AI features act with the operator's approval under the default policy. The full table, with what each feature is not for, is in DISCLAIMER.md.

What the project will not help with#

Issues, discussions and pull requests that ask for help with a use on the list above will be closed. That includes requests for features whose only purpose is to defeat a service's detection of automation or of emulated devices.

Reporting#

A vulnerability in Super Farm: report it privately, see SECURITY.md.
Abuse of a service that you believe was carried out with this software: report it to that service. The authors have no access to any installation and cannot see or stop what it does.

Next#

DISCLAIMER.md: responsibility, warranty and risks
SECURITY.md: reporting a vulnerability
docs/SECURITY_MODEL.md: what the software protects and what it does not