Terms Of Service
****************

Last Updated: 12.07.2022

Welcome! GNUnet e.V. (“we,” “our,” or “us”) provides a privacy-
friendly Taler wallet key directory through our Internet presence
(collectively the “Services”). Before using our Services, please read
the Terms of Service (the “Terms” or the “Agreement”) carefully.


Overview
========

This section provides a brief summary of the highlights of this
Agreement. Please note that when you accept this Agreement, you are
accepting all of the terms and conditions and not just this section.
We and possibly other third parties provide Internet services which
interact with the TalDir key directory application. When using an
application to interact with our Services, you are agreeing to our
Terms, so please read carefully.


Highlights:
-----------

   * You are responsible for selecting authentication methods and
     policies that are adequate to protect your wallet key mappings.
     Any losses arising from you not being able to satisfy the
     selected authentication challenges or third parties being able
     successfully pass the challenges are your problem.

   * We will store your hashed account handle and allow clients to
     query the associated Taler wallet key material. Our liability
     will be limited to the liability limit exposed in the protocol.

   * For our Services, we may charge various fees. The specific fee
     structure is provided based on the TalDir protocol and should be
     shown to you when you use an application to interact with our
     services. You agree and understand that the TalDir protocol
     allows for the fee structure to change.

   * You agree to not intentionally overwhelm our systems with
     requests and follow responsible disclosure if you find security
     issues in our services.

   * We cannot be held accountable for our Services not being
     available due to circumstances beyond our control. If we modify
     or terminate our services, we will announce this and ensure that
     you can recover your key material for at least one year before we
     completely terminate the Service.

These terms outline approved uses of our Services. If you have any
questions or comments related to this Agreement, please send us a
message to taldir@gnunet.org. If you do not agree to this Agreement,
you must not use our Services.


How you accept this policy
==========================

By using our API (typically via an TalDir-enabled application), you
acknowledge that you have read, understood, and agreed to these Terms.
We reserve the right to change these Terms at any time. If you
disagree with the change, you must simply stop using our APIs.  Your
continued use of our Services following any such change will signify
your acceptance to be bound by the then current Terms. Please check
the effective date above to determine if there have been any changes
since you have last reviewed these Terms.


Services
========

We will store your hashed account handle and an associated Taler
wallet key. To the best of our ability and within the limitations of
the implementation. This mapping can be queried by third parties as
that is the purpose of the service. We will rate-limit the use of the
authentication APIs to limit brute-force attacks.

We are not guaranteeing that the authentication procedures are
effective. Other parties may be able to intercept authentication
messages, or you may not be able to receive these messages anymore.
You are responsible for choosing safe authentication methods with
sufficient security.

When using our Services, you agree to not take any action that
intentionally imposes an unreasonable load on our infrastructure. If
you find security problems in our Services, you agree to first report
them to taldir@gnunet.org and grant us the right to publish your
report. We warrant that we will ourselves publicly disclose any issues
reported within 1 month, and that we will not prosecute anyone
reporting security issues if they did not exploit the issue beyond a
proof-of-concept, and followed the above responsible disclosure
practice.


Fees
====

You agree to pay the fees for initial registration and monthly service
("Fees") as defined by us, which we may change from time to time. Your
TalDir client should obtain and display applicable fees during
registration and renewal of registrations.


Eligibility
===========

To be eligible to use our Services, you must be able to form legally
binding contracts or have the permission of your legal guardian. By
using our Services, you represent and warrant that you meet all
eligibility requirements that we outline in these Terms.


Copyrights and trademarks
=========================

The TalDir software is released under the terms of the GNU Affero
General Public License (GNU AGPLv3+). You have the right to access,
use, and share the TalDir application, in modified or unmodified form.
However, the Affero GPL is a strong copyleft license, which means that
any derivative works must be distributed under the same license terms
as the original software. If you have any questions, you should review
the GNU AGPL’s full terms and conditions at
https://www.gnu.org/licenses/agpl-3.0.en.html.


Limitation of liability & disclaimer of warranties
==================================================

You understand and agree that we have no control over, and no duty to
take any action regarding: Failures, disruptions, errors, or delays in
processing that you may experience while using our Services; The risk
of failure of hardware, software, and Internet connections; The risk
of malicious software being introduced or found in the software
underlying the TalDir implementation. You release us from all
liability related to any losses, damages, or claims arising from:

1. user error such as forgotten security answers or loss of control
   over accounts used for authentication;

(b) server failure or data loss; (d) bugs or other errors in the
TalDir client software; and (e) any unauthorized third party
activities, including, but not limited to,

   the use of viruses, phishing, brute forcing, or other means of
   attack against the TalDir client. We make no representations
   concerning any Third Party Content contained in or accessed through
   our Services.

Any other terms, conditions, warranties, or representations associated
with such content, are solely between you and such organizations
and/or individuals.

To the fullest extent permitted by applicable law, in no event will we
or any of our officers, directors, representatives, agents, servants,
counsel, employees, consultants, lawyers, and other personnel
authorized to act, acting, or purporting to act on our behalf
(collectively the “TalDir Parties”) be liable to you under contract,
tort, strict liability, negligence, or any other legal or equitable
theory, for:

1. any lost profits, data loss, cost of procurement of substitute
   goods or services, or direct, indirect, incidental, special,
   punitive, compensatory, or consequential damages of any kind
   whatsoever resulting from:

   1. your use of, or conduct in connection with, our services;

   2. any unauthorized use of your wallet and/or private key due to
      your failure to maintain the confidentiality of your wallet;

   3. any interruption or cessation of transmission to or from the
      services; or

   4. any bugs, viruses, trojan horses, or the like that are found in
      the Taler Wallet software or that may be transmitted to or
      through our services by any third party (regardless of the
      source of origination), or

2. any direct damages.

These limitations apply regardless of legal theory, whether based on
tort, strict liability, breach of contract, breach of warranty, or any
other legal theory, and whether or not we were advised of the
possibility of such damages. Some jurisdictions do not allow the
exclusion or limitation of liability for consequential or incidental
damages, so the above limitation may not apply to you.

Our services are provided "as is" and without warranty of any kind. To
the maximum extent permitted by law, we disclaim all representations
and warranties, express or implied, relating to the services and
underlying software or any content on the services, whether provided
or owned by us or by any third party, including without limitation,
warranties of merchantability, fitness for a particular purpose,
title, non-infringement, freedom from computer virus, and any implied
warranties arising from course of dealing, course of performance, or
usage in trade, all of which are expressly disclaimed. In addition, we
do not represent or warrant that the content accessible via the
services is accurate, complete, available, current, free of viruses or
other harmful components, or that the results of using the services
will meet your requirements. Some states do not allow the disclaimer
of implied warranties, so the foregoing disclaimers may not apply to
you. This paragraph gives you specific legal rights and you may also
have other legal rights that vary from state to state.


Indemnity and Time limitation on claims and Termination
=======================================================

To the extent permitted by applicable law, you agree to defend,
indemnify, and hold harmless the TalDir Parties from and against any
and all claims, damages, obligations, losses, liabilities, costs or
debt, and expenses (including, but not limited to, attorney’s fees)
arising from: (a) your use of and access to the Services; (b) any
feedback or submissions you provide to us concerning the TalDir
software; (c) your violation of any term of this Agreement; or (d)
your violation of any law, rule, or regulation, or the rights of any
third party.

You agree that any claim you may have arising out of or related to
your relationship with us must be filed within one year after such
claim arises, otherwise, your claim in permanently barred.

In the event of termination concerning your use of our Services, your
obligations under this Agreement will still continue.


Discontinuance of services and Force majeure
============================================

We shall not be held liable for any delays, failure in performance, or
interruptions of service which result directly or indirectly from any
cause or condition beyond our reasonable control, including but not
limited to: any delay or failure due to any act of God, act of civil
or military authorities, act of terrorism, civil disturbance, war,
strike or other labor dispute, fire, interruption in
telecommunications or Internet services or network provider services,
failure of equipment and/or software, other catastrophe, or any other
occurrence which is beyond our reasonable control and shall not affect
the validity and enforceability of any remaining provisions.


Governing law, Waivers, Severability and Assignment
===================================================

No matter where you’re located, the laws of Germany will govern these
Terms. If any provisions of these Terms are inconsistent with any
applicable law, those provisions will be superseded or modified only
to the extent such provisions are inconsistent. The parties agree to
submit to the ordinary courts in Germany for exclusive jurisdiction of
any dispute arising out of or related to your use of the Services or
your breach of these Terms.

Our failure to exercise or delay in exercising any right, power, or
privilege under this Agreement shall not operate as a waiver; nor
shall any single or partial exercise of any right, power, or privilege
preclude any other or further exercise thereof.

You agree that we may assign any of our rights and/or transfer, sub-
contract, or delegate any of our obligations under these Terms.

If it turns out that any part of this Agreement is invalid, void, or
for any reason unenforceable, that term will be deemed severable and
limited or eliminated to the minimum extent necessary.

This Agreement sets forth the entire understanding and agreement as to
the subject matter hereof and supersedes any and all prior
discussions, agreements, and understandings of any kind (including,
without limitation, any prior versions of this Agreement) and every
nature between us. Except as provided for above, any modification to
this Agreement must be in writing and must be signed by both parties.


Questions or comments
=====================

We welcome comments, questions, concerns, or suggestions. Please send
us a message on our contact page at taldir@gnunet.org.
