Version 1.0 · effective from the date of the first public release. Changes are published in the git history of `chimera-storefront` and announced in the warrant canary.

1. What you buy

You buy access to the CHIMERA suite (any one or all six apps) for the chosen period (Apprentice / Adept / Magus) in exchange for a cryptocurrency payment. No automatic renewals, no hidden charges, no downgrade-after-cancel-attempt tricks. When the period ends — connection to the apps is disabled automatically until a new payment.

2. What is forbidden

CHIMERA is a privacy tool, not an impunity tool. We do not monitor traffic (see `/legal/privacy`), but on receipt of a credible complaint with evidence we block the corresponding key_hash.

• Material related to the exploitation of minors (CSAM) — zero tolerance, no warning
• Spam, phishing, C2 for malware
• DDoS attacks originating in our network
• Mass port scanning (slow reconnaissance is allowed)
• Violations of provider ToS (abusive transactions, rapid-fire signups on third-party services, intrusion attempts)

Not considered forbidden: circumventing censorship in any jurisdiction, downloading copyrighted material (the rights holder's burden to find you is on them, not us), P2P sharing, anonymous publishing, journalism, activism, whistleblowing.

3. Refunds and SLA

• 14-day right of withdrawal: within 14 days from the first payment — 100% refund, to the same crypto address, without justification
• Post-14-day refund: pro-rata for the remaining part of the subscription, without penalty. Do not abuse — a key with 3 refunds within a calendar year is no longer activated
• SLA: if censorship circumvention in your region is broken for more than 48 hours in a row — compensation of 10% of the term or a pro-rata refund for the downtime, your choice

4. Our commitments

• No-logs — verified by the reproducible build of `chimera-node` (independently checked by a third party, with the result in the audit at `/legal/security`)
• Warrant canary — a monthly PGP-signed statement at `/canary`. A miss > 35 days = treat the canary as triggered
• Open source apps — every app is under FLOSS licenses; anyone can build and compare
• Signed releases — every binary is signed with the release key via minisign. Key compromise is announced via the canary

5. Limitation of liability

CHIMERA is provided "as is". We do not guarantee the bypass of every specific DPI stack in the world — our ML model learns, but a new censor rollout may break a protocol for an hour or a day until retraining. In jurisdictions where VPN or encrypted comms are forbidden by law — the responsibility for using it lies with you.

The maximum amount of our liability is capped at the amount you paid for the current subscription period.

6. Changes to the terms

Changes to this document are announced:

• By a commit to `chimera-storefront` (the git history is public)
• By a block in the next warrant canary
• 30 days before they take effect — for material changes (not typo fixes)

If you disagree — a refund for the remaining part of the current subscription per §3. Continued use after the effective date = agreement.

7. Jurisdiction / enforcement

CHIMERA is a solo-operator project with no legal entity. This document is a contract between you and the pseudonym `CHIMERA-lead`, signed on our side with a GPG key whose fingerprint is published at `/canary`.

The general principles of contract law in the jurisdiction of the individual server provider of the node you have a dispute with apply to this document — there is no overarching jurisdiction. This is a deliberate trade-off: we cannot give you strong guarantees, but we can guarantee that we cannot be compelled as an entity.

8. Contact

Support, billing questions, disputes — only via SimpleX Chat or GPG-encrypted email. Details and keys are on /legal/security and /canary. Plain email without encryption goes to /dev/null.