Terms of Service

By creating a mosskeys account or using the service, you agree to these terms. If you are using mosskeys on behalf of an organization, you represent that you are authorized to accept these terms for that organization. If you do not agree, do not use the service.

mosskeys is a managed, post-quantum key directory built on append-only transparency logs. You can create namespaces, publish public key material and client-signed checkpoints through the authenticated write API, and let anyone read and verify those entries through the public read API. Private key material is generated and sealed in your browser and is never transmitted to us.

• You are responsible for the security of your account, your API tokens, and any signing keys you hold locally. We never see your private keys or signing keys and cannot recover them for you.
• You must keep your contact email current so we can send security and account notices. We support magic-link sign-in, passkeys, and optional two-factor authentication; enabling stronger factors is recommended.
• You must be able to form a binding contract to use mosskeys. You may not use the service if barred from doing so under applicable law.

When you publish to a namespace you are writing to a public, append-only transparency log. You acknowledge and agree that:

• Labels and committed leaf bytes you publish are public and can be read and verified by anyone.
• Entries are permanent. An append-only log cannot rewrite or delete history without breaking its guarantee, so you cannot retract a published entry from the log's history.
• You are responsible for the content of what you publish, including the labels you choose. Do not publish anything you need to keep private or that you do not have the right to publish.

You agree not to use mosskeys to:

• violate any law or infringe the rights of others;
• publish content that is unlawful, or that impersonates a person or entity you are not authorized to represent;
• abuse, overload, or attempt to circumvent rate limits, entitlements, or the security of the service;
• probe, scan, or disrupt the service or attempt to gain unauthorized access to it or to other accounts.

mosskeys offers a free evaluation tier and paid tiers with higher entitlements. Paid plans are billed through Stripe. We store subscription and entitlement metadata to resolve your tier; we do not store your card data. You can manage or cancel your subscription from your billing settings. Fees already incurred are non-refundable except where required by law.

Our handling of your data is described in the Privacy Policy. You can export your account data or request deletion from your account settings. Because published log entries are public and permanent, deletion applies to your account and namespaces, not to the immutable history of past public entries.

The service is provided on an "as is" and "as available" basis. To the fullest extent permitted by law, we disclaim all warranties, express or implied, including fitness for a particular purpose. Transparency checkpoints are self and client signed; our servers never sign on your behalf. Relay to independent C2SP witnesses with merged cosignatures is available on paid tiers, but this deployment has no witnesses configured yet, so witnessing is not a current guarantee. You are responsible for verifying entries against your own trusted keys.

To the fullest extent permitted by law, mosskeys and Moss Piglet will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, keys, or profits arising from your use of the service.

You may stop using mosskeys and delete your account at any time. We may suspend or terminate access if you violate these terms or use the service in a way that risks harm to others or to the service. Provisions that by their nature should survive termination will survive.

We may update these terms as mosskeys evolves. Material changes will be reflected in the effective date at the top of this page, and where appropriate we will notify account holders by email. Continued use after a change means you accept the updated terms.