Implementing Regulations for 120,000 Users in 48 Hours

The challenge

The app served exactly 118,432 active accounts. On Friday morning, the system recorded 14,308 spam send attempts per hour, clogging servers and infuriating users. Manual moderation couldn't keep up, and existing legal entries were too general to automatically ban users without risk of lawsuits. Support received an average of 427 reports per hour, completely paralyzing the Poznań team's work.

Our approach

We started work on Saturday at 08:30 AM with a three-person team. Instead of writing regulations from scratch, we analyzed 14 pages of current documentation and found 4 key legal gaps. We focused on creating a precise 'Appendix on Automatic Moderation', allowing the system to immediately isolate accounts with specific behavioral patterns. Throughout Saturday, we consulted technical aspects with the client's programmers so the law kept pace with the code.

The solution

We delivered a condensed, 4-page document written in simple language explaining the new verification rules to users. We introduced a 'progressive consent' mechanism – users had to accept new terms at the first app launch after the server update. Additionally, we prepared specifications for cookies that monitored unique device identifiers to detect bot farms while ensuring GDPR compliance.

Results

Thanks to quick reaction and precise provisions, the app stayed in Google and Apple stores. Spam was reduced almost to zero in less than a day from the publication of the new rules.

Timeline

1. Saturday 08:30
   Analysis of 14 pages of old regulations and identification of legal holes.
2. Saturday 16:00
   Finalization of Automatic Moderation Appendix content.
3. Sunday 11:15
   Technical verification of acceptance mechanism with IT department.
4. Sunday 20:45
   Publication of documents and start of forced re-acceptance of terms.