Terms of Service

The following documents are incorporated into these Terms by reference and form part of your agreement with us:

• Privacy Policy
• Acceptable Use Policy
• Copyright & DMCA Policy

You acknowledge that you are solely responsible for your actions on the Platform, that trading digital assets involves substantial risk of total loss, that past performance guarantees nothing, and that you should never commit funds you cannot afford to lose entirely.

• You are at least 18 years old, or the age of legal majority in your jurisdiction if that is higher.
• You have full legal capacity — and, if you act for an entity, full authority — to enter into a binding agreement.
• You are not located in, ordinarily resident in, or organised under the laws of a jurisdiction where the Platform's activities are prohibited, and your use does not breach the law that applies to you.
• You are not a resident of, or located in, a country or territory subject to comprehensive sanctions administered by the United States, the European Union, the United Kingdom or the United Nations — currently including Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk and Luhansk regions of Ukraine.
• You are not listed on, and are not owned or controlled by a person listed on, any sanctions or restricted-party list, including the U.S. Treasury OFAC Specially Designated Nationals list, the UK Consolidated List, or the EU Consolidated List.
• You will not use a VPN, proxy, mirror or any other technique to disguise your location in order to circumvent these restrictions.

We may amend these eligibility criteria at any time and may refuse, restrict or withdraw access to any person at our discretion. Screening for eligibility is our right, not our obligation; the responsibility to comply with the law that applies to you is yours alone.

• We are not a custodian. We do not hold, control or have access to your digital assets, or to the private keys and recovery phrases that control them, at any time. If you use Bad Vault, we store an encrypted copy of your wallet that we cannot decrypt with anything we hold (section 5); storing it gives us no ability to access or move your assets.
• We are not a broker, exchange, bank or money transmitter and we do not act as your agent, trustee, adviser or fiduciary. Nothing in these Terms creates a fiduciary, advisory, partnership, joint venture or employment relationship.
• Deployment is permissionless. We do not review, endorse, verify, vet or vouch for any token, its creator, or any claim made about it. The presence of a token on the Platform means only that someone deployed it.
• We do not control the underlying networks. Blockchains, validators, bridges, external routers and liquidity venues operate independently of us.
• We may act on the Platform ourselves. We and our affiliates may hold, create or transact in digital assets and may receive fees from multiple parties. We are under no obligation to disclose a conflict of interest or to prefer your interests over our own.

We may modify, suspend, limit or discontinue any feature of the Platform at any time, with or without notice. Access is provided at our discretion.

• Keep your credentials, one-time codes, two-factor secrets, recovery phrase, passkeys, device PINs and passwords, and devices secure. Never share them with anyone — including anyone claiming to be Bad Place support.
• You are responsible for maintaining adequate security on the hardware and software you use to access the Platform.
• Activity carried out through your account or signed by your wallet is treated as authorised by you. A valid signature is conclusive evidence of authorisation as between you and us, with one exception: where Bad Vault signed a transaction in fast mode without asking you to confirm it (section 5.7), the signature shows that the transaction met the rules Bad Vault applied at that moment, not that you personally asked for that particular transaction. This exception concerns evidence only; it does not extend our liability beyond section 17.
• Notify us at [email protected] as soon as you suspect unauthorised access, and review your activity history regularly.
• We cannot recover a lost seed phrase, reverse a transaction, or restore access to a wallet. Not because we decline to, but because we hold nothing that would make it possible. That includes Bad Vault: the encrypted copy we store cannot be opened without one of your passkeys or your recovery phrase (section 5).

One person may not operate accounts to evade a restriction, inflate rewards or manipulate a market. Where we identify accounts under common control being used for that purpose, we may treat them as a single account and act against all of them.

5.1 What Bad Vault is. Bad Vault is self-custodial wallet software. It runs in your browser, in a separate part of the Platform at wallet.badplace.io, and it is opened with a passkey. Your digital assets are held at blockchain addresses that only your keys control — not by us. A Bad Vault is not a bank account, a deposit or a payment account, it earns no interest, and it is not covered by any deposit guarantee, investor compensation or insurance scheme. Each account can have one active Bad Vault. You can use it alongside an external wallet; the interface shows which wallet is active, and you are responsible for checking which one you are using before you confirm anything.

5.2 Creating or importing a wallet. When you create a Bad Vault, your browser generates a new recovery phrase of 12 words from a cryptographically secure random source. You may instead import an existing recovery phrase of 12 or 24 words; import only a phrase you are entitled to control. Your recovery phrase is your wallet: anyone who obtains it can take everything held at its addresses, with or without Bad Vault. Bad Vault shows your recovery phrase, and asks you to type it, only in a separate window whose address bar shows wallet.badplace.io — never on a badplace.io page, and never by email, chat or support ticket.

5.3 The encrypted copy we store. So that you can open Bad Vault with a passkey on your devices, your browser encrypts your wallet and sends us the encrypted copy, which we store with your account. It can be decrypted only with a key derived on your device from one of your passkeys, or with your recovery phrase; neither is ever sent to us. We cannot decrypt the copy with anything we hold, and we cannot use it to sign transactions or move your assets. The encrypted copy is a convenience, not a backup that we guarantee: it can become unavailable — for example if you delete your Bad Vault or your account, if we discontinue Bad Vault, if data is lost, or in the circumstances described in 5.10. Your recovery phrase is the only backup that does not depend on us. What we store is described in the Privacy Policy.

5.4 Recovery — and what we cannot do. You can regain access to a Bad Vault only with (a) a passkey you added to it before you lost access, or (b) its recovery phrase, which also lets you add a new passkey to it. We cannot reveal, reset or recreate your recovery phrase, reset or replace your passkeys, decrypt your encrypted copy, or restore access in any other way, and our support team cannot help with any of these. Anyone who claims otherwise is attempting to defraud you. If you have lost every means of access, you may ask for a reset from your account: after a waiting period (currently 72 hours) and a notice to the email address on your account, you will be able to create a new Bad Vault. You must complete the reset — by creating the new Bad Vault or, as described in 5.11, by deleting your account — within 7 days after the waiting period ends; otherwise the request lapses, and you will need to make a new request with a new waiting period. The reset does not go ahead if, before it is completed, the request is cancelled from your account or the existing Bad Vault is used to approve a change to it or to trade through the Platform. A reset does not recover the old wallet or anything held in it: those assets remain at their addresses and can be reached only with the old recovery phrase or, while the old Bad Vault is archived, with one of its passkeys (5.9).

5.5 Passkeys and your devices. Your passkeys are created and kept by your device, browser or passkey provider (such as a password manager), not by us. Whether a passkey is synchronised to your other devices, backed up or recoverable depends on that provider and is governed by its terms. A passkey check is normally satisfied by your device's screen lock — a fingerprint, a face scan, or your device PIN, pattern or password. Anyone who knows or can get past your device's PIN or password, or who controls the account your passkeys are synchronised to, can therefore use your passkey, and together with access to your Bad Place account that is enough to open your Bad Vault and move your assets. Protect both: use a device PIN or password that others do not know, secure the account that stores your passkeys, enable two-factor authentication on your Bad Place account, and remove from your Bad Vault any passkey on a device you no longer control. Bad Vault always keeps at least one passkey; if you lose access to all of them, you will need your recovery phrase to use Bad Vault again.

5.6 Browser and device compatibility. Bad Vault works only with passkeys that support the WebAuthn PRF extension, and it depends on other browser features that we do not control. It cannot be unlocked without such a passkey: your recovery phrase can add a passkey, or take your wallet to other software, but it does not unlock Bad Vault on its own. Not every browser, device, operating system or passkey provider supports these features, and an update can change or withdraw that support. Setting up a Bad Vault and adding a passkey are available only on badplace.io. We do not promise that Bad Vault will work, or keep working, with any particular browser, device or passkey provider. If it stops working for you, your recovery phrase lets you use your wallet in other software (5.9).

5.7 Fast mode, confirmations and limits. While it is unlocked, Bad Vault signs some transactions without asking you to confirm each one (“fast mode”). Fast mode is limited to buying, selling, creating tokens and claiming through the Platform's own smart contracts, and to approving those contracts to spend your tokens. It applies only when you use Bad Vault on badplace.io and the transaction passes the checks built into Bad Vault: that it is on a supported network, calls one of those contracts with a recognised function, delivers what you buy or receive to your own Bad Vault address, carries a minimum-amount limit where the function has one, stays within fee, gas and rate ceilings, and stays within any limit you have set. By using Bad Vault you instruct it to sign transactions that pass these checks without further confirmation. You can set per-transaction limits in Bad Vault's settings; there are none unless you set them, and a transaction above a limit you set needs a passkey check.

These checks confirm the form of a transaction, not that it is a good trade. A transaction that passes them can still lose value — through price impact, slippage within its limit, front-running or the token itself — and if the website you are using were compromised, it could ask Bad Vault to sign transactions that pass the checks without your knowledge. Setting per-transaction limits, and locking Bad Vault when you are not trading, reduce that risk.

Other transactions — for example to a third-party aggregator or bridge — and requests to sign a message need your confirmation in a separate Bad Vault window: a browser window whose address bar shows wallet.badplace.io. That window shows the request as Bad Vault itself reads it, together with the address of the website making the request. Check both before you confirm, and rely on that window rather than on anything the website shows about the request. If the window is blocked or closed, or the request is not answered in time, the request is cancelled. Withdrawals and transfers to another address, transactions whose recipient Bad Vault cannot confirm is your own address, transactions above a limit you set, approvals that let a contract other than the Platform's own spend an unlimited amount, revealing your recovery phrase, adding, renaming or removing passkeys, changing your limits and deleting your Bad Vault need a passkey check in that window every time. On other addresses we operate, such as our backup domains, fast mode is not available and every transaction needs your confirmation in the Bad Vault window, which may not be available on those addresses. Bad Vault limits how often it asks you for confirmation and, after you decline several requests in a row, stops asking for a few minutes. Bad Vault refuses some kinds of signature request altogether. On BNB Chain, Bad Vault sends transactions to the public network unless you turn on protected mode, which sends them to a third-party transaction relay instead; if that relay is unavailable, Bad Vault asks you before sending through the public network. Neither mode guarantees protection from front-running or MEV. Bad Vault's checks and ceilings are among the limits described in section 14, and we may change them; a change that would let fast mode sign a kind of transaction it does not sign today is a material change under section 22.

5.8 What the screen shows you. After Bad Vault signs a transaction, the interface may show it as sent before the blockchain has included it, and may update balances and positions before it is confirmed. Until the network confirms a transaction, what the interface shows is provisional: the transaction may still fail, be replaced or be dropped, and a transaction shown as pending or with an unknown status may still be included later. Check its status before you send it again — sending it again can result in both transactions executing. The record on the blockchain, not the interface, is what counts. Before you send assets to your Bad Vault address, you can display it in the Bad Vault window described in 5.7 and check that it matches the address the website shows. Bad Vault locks itself when you lock it, sign out or reload the page, after 15 minutes without activity, and in any case 8 hours after it was unlocked.

5.9 Leaving Bad Vault. You can reveal your recovery phrase at any time after a passkey check, in the wallet.badplace.io window described in 5.2, and use it in any wallet software that supports BIP-39 recovery phrases with the derivation paths m/44'/60'/0'/0/0 for EVM networks and m/44'/501'/0'/0' for Solana. We do not charge for this and you do not need our permission. In the current version, Bad Vault shows a Solana address and can receive assets to it but cannot send from it; to move assets held at your Bad Vault Solana address, import your recovery phrase into other wallet software that supports the Solana path above. You can delete your Bad Vault at any time after a passkey check. A deleted Bad Vault, like one replaced after a reset (5.4), is archived: for 12 months we keep its encrypted copy and passkey records so that its passkeys can still open it to move assets or reveal its recovery phrase, but not to change it, and then we delete them. Deleting a Bad Vault does not affect assets held at its addresses.

5.10 Dependence on our domain and infrastructure. A passkey works only with the internet address it was created for, and Bad Vault's passkeys are bound to wallet.badplace.io. If we lose control of that domain, if it becomes unreachable, or if we stop operating it, your passkeys will no longer open Bad Vault, and the encrypted copy is out of reach whenever the servers that store it are unavailable. The software that runs Bad Vault — including the code that decrypts your wallet in your browser — is delivered by us from wallet.badplace.io each time you use it. We keep it separate from the rest of the Platform, but no software or infrastructure is free of risk: if it were compromised, your keys could be exposed when you unlock Bad Vault. Your recovery phrase works without any of our infrastructure.

5.11 Suspension, termination and deleting your account. We do not withhold access to Bad Vault as an enforcement measure. If your account is restricted, suspended or terminated under section 14, you can still sign in, open your Bad Vault with your passkey, reveal your recovery phrase and move your assets, unless the law requires us to act otherwise or Bad Vault has been suspended or discontinued under 5.12 or section 3. If your account has a Bad Vault, deleting the account needs a passkey check in the Bad Vault window on the website (5.7) or a completed reset (5.4); the mobile app cannot provide either and refers you to the website. Once you ask us to delete your account, your Bad Vault can no longer be opened with a passkey unless you restore the account during the restore period; when the account is permanently deleted, the Bad Vault and any archived Bad Vaults are deleted with it. Before you delete your account, move your assets or make sure you have your recovery phrase. Deleting your account does not affect assets on the blockchain. If we stop offering Bad Vault to new users, existing Bad Vaults can still be opened to move assets and reveal recovery phrases. If we decide to discontinue Bad Vault altogether, we will give reasonable advance notice where we are able to, so that you can move your assets or note your recovery phrase.

5.12 Security incidents. If we become aware of an incident that we reasonably believe puts Bad Vault users' assets at risk — for example a compromise of the Bad Vault software or of infrastructure it depends on — we may, without notice, suspend Bad Vault or any of its features (such as fast mode), including by taking wallet.badplace.io offline, for as long as we consider necessary. We will tell affected users as soon as we reasonably can, by email, in the interface or through our official channels, and explain how to move their assets using their recovery phrase. Suspending Bad Vault does not stop you from using your recovery phrase in other wallet software. Report a suspected Bad Vault vulnerability to [email protected].

5.13 No guarantee. Bad Vault is provided under sections 16 and 17. Nothing in this section is a promise that Bad Vault is free of vulnerabilities, that it will remain available, or that the encrypted copy will remain available.

• Token prices are extremely volatile and can fall to zero at any time.
• Bonding curve mechanics mean earlier participants may profit at the expense of later ones. This is a property of the design, not a defect.
• Smart contracts may contain bugs or vulnerabilities, including contracts that have been reviewed or audited, and an exploit can drain value irrecoverably.
• Blockchain transactions are irreversible. A transaction sent to the wrong address, on the wrong chain, or with the wrong parameters cannot be undone by anyone.
• Wallet software, browsers, devices and passkey providers can fail, change or be compromised. If you lose your recovery phrase — and, for Bad Vault, all of your passkeys — no one can restore your wallet (section 5).
• Network congestion, failed transactions, reorganisations, gas spikes, MEV, front-running and sandwich attacks can cause loss.
• Slippage, low liquidity and price impact may cause an order to execute at a materially worse price than quoted. Quotes are estimates, not guarantees.
• Rug pulls, honeypots, impersonation, market manipulation and outright fraud are common in this market. Anyone can create a token with any name or logo, including one imitating a real project.
• Bridges and cross-chain routes carry additional risk of loss independent of the Platform.
• Regulatory action may affect the value, transferability or legality of a token, or of the Platform itself, without warning.
• You may lose your entire investment, and you may lose it instantly.

NOTHING ON THE PLATFORM CONSTITUTES FINANCIAL, INVESTMENT, LEGAL, ACCOUNTING OR TAX ADVICE. No content, ranking, feed placement, badge, statistic, AI output or communication from us is a recommendation to buy, sell or hold anything. We are not registered or licensed to provide investment advice in any jurisdiction. You make your own decisions and you bear their consequences. Obtain independent professional advice before you transact.

Verify the contract address yourself. A token's name, symbol and image are chosen by whoever deployed it and can be copied exactly. Two tokens can look identical in every visible respect and be entirely unrelated. Confirm the contract address from a source you trust before you transact, and confirm it again before you approve a spend.

We do not guarantee that you will be able to sell. We make no representation about liquidity, market depth, the price you will receive, whether a token will reach its bonding-curve target and graduate to a decentralised exchange, whether trading will remain available on any venue, or whether you will be able to exit a position at all. A token can become illiquid at any time, and illiquid means there may be no buyer at any price.

• Platform fees — charged on trades, token creation and certain features. Rates are shown in the interface and may be changed at any time; the rate in effect when you submit a transaction applies to it.
• Network fees (gas) — charged by the blockchain, not by us. We neither set nor receive them.
• Third-party fees — routers, aggregators, bridges and liquidity venues may charge their own fees, which are outside our control.
• Execution costs — price impact, slippage, routing costs and the cost of thin liquidity are not fees charged by us or by anyone else. They are the difference between the price you were shown and the price the market gave you when your transaction settled, and they grow with the size of your trade and with how little liquidity is available.
• Creator fees, rewards, referrals and distributions — where the Platform makes these available, they are calculated by our systems from on-chain and off-chain data. We make no representation or warranty about the amount, timing, continuation or value of any reward, and we may modify or discontinue any reward programme at any time.

Every figure the interface shows you before you confirm — fees, the amount you will receive, price impact, total cost — is an estimate calculated at that moment. Price, available liquidity and the state of the blockchain can all change between the moment a quote is displayed and the moment your transaction settles, so the final amount may differ from the estimate. Where the interface lets you set a slippage tolerance, that setting is the limit you accept: a transaction that would settle outside it is designed to fail rather than execute at a worse price.

Fee calculations made by our systems are final and binding except in the case of a manifest error, which we may correct. Fees already incurred are not refundable, and a transaction settled on-chain cannot be reversed or refunded by us under any circumstances.

We do not withhold tax on your behalf, we do not provide tax advice, and we do not file returns for you. Transaction histories, position views, profit and loss figures and exports offered by the Platform are provided for convenience only. They are not tax statements, they may be incomplete or inaccurate, and they should not be relied on for a tax filing without independent verification.

• You are responsible for the name, symbol, image, description and every claim you make about a token, on the Platform and anywhere else.
• You confirm that you hold the rights to all content you upload and that it infringes no trademark, copyright, publicity right or other right.
• You must not create a token that impersonates a person, project, brand or organisation, or that is designed to mislead people about what they are buying.
• On-chain actions are irreversible. We cannot edit, freeze, reverse, refund or delete a token once it has been created.
• You are responsible for complying with every law that applies to you, including securities, commodities, consumer protection, advertising, tax and anti-money-laundering rules. Creating a token may constitute a regulated offering in your jurisdiction — that is your risk to assess.
• You must not use the Platform to raise capital in a transaction that would require registration, authorisation or a prospectus that you do not hold.
• You accept liability for any claim brought by a third party in connection with a token you created, and you will hold us harmless from it under section 18.

To operate the Platform we need permission to use that content. You grant us a worldwide, non-exclusive, royalty-free, sublicensable and transferable licence to host, store, cache, reproduce, adapt for formatting and display, publish, distribute and publicly display your content, solely for the purposes of operating, securing, promoting and improving the Platform and its features. This licence covers the technical operations that displaying content requires — resizing an image, generating a preview card, caching at the edge, indexing for search and ranking.

This licence ends when you delete the content or your account, except that: copies retained in backups persist until those backups expire in the ordinary course; content you shared with others, or that others reposted or quoted, may remain visible through their copies; anything you wrote to a public blockchain is permanent and outside our control; and we may retain what we must retain under the Retention section of the Privacy Policy.

You represent that you own or have the rights to everything you submit, that it does not infringe any third-party right, and that it complies with our Acceptable Use Policy. We may remove or restrict any content at any time, with or without notice, and we are under no obligation to monitor or store your content or to preserve a copy for you.

Feedback is different. If you send us a suggestion, bug report, feature idea or other feedback, you grant us an irrevocable, perpetual, worldwide, royalty-free licence to use, modify and implement it without restriction, attribution or payment. We are not obliged to keep feedback confidential, so do not send us anything you consider confidential or proprietary.

We grant you a limited, revocable, non-exclusive, non-transferable, non-sublicensable licence to access and use the Platform for your own personal, non-commercial use, in accordance with these Terms. That licence ends automatically when these Terms end.

You must not copy, modify, reverse engineer, decompile, disassemble, frame, mirror or create derivative works of the Platform; remove or obscure any proprietary notice; use our names or marks without our written permission; or scrape, crawl or harvest data from the Platform other than through an API we provide and in accordance with its terms.

Publicly available on-chain data is not ours and this section does not restrict your use of it.

• AI output is provided “as is”, with no warranty of accuracy, originality, ownership or fitness for any purpose.
• AI output may unintentionally resemble existing works. Verifying that what you publish infringes no third-party right is your responsibility, not ours.
• The legal status of AI-generated material differs between jurisdictions and may not be protectable at all. We make no representation about what rights, if any, you obtain in it.
• Automated moderation is a filter, not an approval. Content that passes it has not been declared lawful, accurate or cleared for use.
• AI features produce no financial, legal, tax or investment advice, whatever their output appears to say.
• You remain responsible for anything you publish using AI output, exactly as if you had created it yourself.

What is sent to which AI provider is described in the AI Features section of the Privacy Policy.

• Create tokens or content for fraudulent, deceptive or unlawful purposes.
• Engage in market manipulation of any kind — including wash trading, spoofing, layering, pump-and-dump schemes, coordinated promotion designed to move a price, or artificial inflation of volume, holders, rewards or engagement metrics.
• Manipulate the market for a digital asset from off the Platform in a way that affects activity on it.
• Use bots, scripts or automation to gain an unfair advantage, to evade rate limits, or to farm rewards, referrals or airdrops. Ordinary programmatic access through a published API, within its terms, is permitted.
• Attempt to exploit a smart contract, interface or API vulnerability, probe or penetration-test our systems without written authorisation, or interfere with the operation or integrity of the Platform.
• Attempt to access, decrypt, copy or tamper with another person's Bad Vault or its encrypted copy, to bypass or weaken the checks Bad Vault applies, or to obtain another person's recovery phrase, passkey or device PIN.
• Use Bad Vault to hold, receive or move digital assets on behalf of other people, or to offer a wallet, custody or payment service to others.
• Copy, frame or imitate the Bad Vault interface or the wallet.badplace.io address, or ask anyone to enter a recovery phrase anywhere other than a Bad Vault window whose address bar shows wallet.badplace.io.
• Impersonate any person, project or organisation, or misrepresent your affiliation with one.
• Upload malicious code, or content that contains or links to it.
• Use the Platform for money laundering, terrorist financing, sanctions evasion, or the proceeds of crime.
• Use a VPN, proxy, anonymising service or falsified location data to circumvent a geographic restriction or a ban.
• Create or use an account to evade a suspension or termination.
• Infringe intellectual property rights, or upload content you do not have the rights to.
• Use the Platform commercially — reselling access, white-labelling, embedding it in a paid product — without our written agreement.
• Use the Platform to raise capital or to operate a collective investment scheme — including pooling other people's funds, offering or promising profit-sharing, revenue participation, dividends, interest or yield, tokenising equity, debt, real-world assets or any ownership, creditor or investment interest in a business, or representing that a token entitles its holder to any of those things.
• Violate any law or regulation that applies to you.

Violation may result in content removal, restriction, permanent termination, forfeiture of unpaid rewards, and referral to law enforcement.

We may also act to protect the Platform, its users or third parties from harm, and we may base a decision on detection signals that we do not disclose in full, because disclosing them would tell the next bad actor how to evade them.

What survives a termination. Whatever we decide about your account, we do not withhold custody of your funds. We never held them: your assets stay at addresses that only your keys control, and enforcement action does not remove your ability to export or use your wallet. For Bad Vault this means you can still sign in, open it with your passkey, reveal your recovery phrase and move your assets, as set out in section 5.11. Your recovery phrase works without us in any case. We may retain records of the account, its activity and the identifiers needed to prevent re-registration, as described in the Retention section of the Privacy Policy.

Appeals. Except for the zero-tolerance categories in the Acceptable Use Policy, you may request human review of an enforcement decision by writing to [email protected].

Limits. We may set and change limits on how the Platform is used — the size or frequency of transactions, the rate of posts, replies, reactions or API calls, how many tokens or communities may be created — and we may apply them per account, per wallet, per device or per network address. We do this for security, abuse prevention, infrastructure capacity and legal reasons. A limit is not a finding about you, and we are not obliged to publish the thresholds we use. Bad Vault applies its own technical checks and ceilings, described in section 5.7.

You may leave at any time. Stop using the Platform and delete your account from the Settings screen of the Bad Place app or by contacting us (section 24). If you use Bad Vault, read section 5.11 first. Deletion does not affect on-chain records, obligations you already incurred, or the provisions of these Terms that survive by their nature (section 23.8).

• We are not responsible for the availability, security, accuracy or conduct of any third-party service, and we do not endorse one by displaying or integrating it.
• Your use of a third-party wallet, passkey provider or authentication provider is governed by that provider's own terms. Reading them is your responsibility. We have no control over a third-party wallet, its keys or its features, or over how your device, browser or passkey provider stores, synchronises or protects your passkeys, and we are not liable for any loss arising from them. Bad Vault is not a third-party wallet: it is part of the Platform and is governed by section 5.
• Third-party data — prices, charts, market capitalisation, liquidity, token safety scores, holder counts and similar figures — is provided for information only, may be incomplete, inaccurate, delayed or unavailable, and must not be relied on as the sole basis for a decision.
• We are not responsible for content another user posts, for tokens another user creates, or for any dispute between you and another user. You release us from claims arising out of such disputes.

We do not warrant that:

• The Platform will be available, uninterrupted, timely or error-free
• Defects will be corrected, or that the Platform is free of malicious code
• Smart contracts will function as intended or are free of vulnerabilities
• Information displayed on the Platform is accurate, current or complete
• Any token has any value, utility, liquidity or legitimacy
• A transaction will be included, confirmed, or executed at a given price
• The Platform will meet your expectations or requirements

YOU USE THE PLATFORM ENTIRELY AT YOUR OWN RISK. Some jurisdictions do not allow the exclusion of certain warranties; where that is so, the exclusions above apply to the fullest extent that law permits, and nothing here removes a warranty that cannot lawfully be removed.

• Any indirect, incidental, special, consequential, exemplary or punitive damages
• Loss of profits, revenue, funds, tokens, digital assets, goodwill, opportunity, data or business, whether direct or indirect
• Losses arising from smart contract bugs, exploits, or vulnerabilities in any contract or protocol
• The acts or omissions of token creators, other users, or any third party, including fraud and scams
• Network congestion, reorganisations, failed or delayed transactions, gas costs, MEV, front-running or sandwich attacks
• Inaccurate, delayed or unavailable price or market data, or failures of third-party services
• Loss or theft of your device, credentials, recovery phrase, passkeys or wallet, or any unauthorised access to them
• Suspension, restriction, modification or discontinuation of the Platform or any feature
• Any decision you made using information obtained through the Platform

OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS OR THE PLATFORM SHALL NOT EXCEED THE GREATER OF (A) THE TOTAL PLATFORM FEES YOU PAID US IN THE THREE MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, AND (B) USD 100.

Time limit. Any claim arising out of or relating to these Terms or the Platform must be brought within one year after the cause of action arises, or it is permanently barred, except where a longer period is required by law that cannot be varied by agreement.

What we do not exclude. Nothing in these Terms excludes or limits our liability for fraud, fraudulent misrepresentation, wilful misconduct, death or personal injury caused by our negligence, or any other liability that cannot lawfully be excluded or limited. If you are a consumer with non-waivable statutory rights, those rights are unaffected and the limits above apply only so far as the law allows. Some jurisdictions do not permit the exclusion of incidental or consequential damages; there, the exclusions apply to the fullest extent permitted.

• Your access to or use of the Platform
• Any token you created, promoted or transacted in
• Any content you submitted, published or distributed
• Your breach of these Terms or of any incorporated policy
• Your violation of any law, regulation or sanctions requirement
• Your infringement of any third-party right, including intellectual property, publicity and privacy rights
• Any dispute between you and another user or a third party
• Any tax obligation of yours that we are required to satisfy or report

We may assume the exclusive defence and control of any matter subject to indemnification by you, at your expense, and you agree to cooperate with that defence. You must not settle any matter in a way that imposes an obligation or admission on us without our prior written consent. This obligation survives termination of these Terms.

Release. Separately from the indemnity above, you release us from every claim, demand and cause of action arising out of a dispute between you and another user, a token creator, a community operator or any other third party — including a token that turns out to be worthless, a creator who abandons a project or removes liquidity, a misleading claim made by someone else, and conduct on a third-party service you reached through the Platform. Your remedy in such a dispute is against that person, not against us. Nothing in this paragraph releases us from liability that cannot be released under the law that applies to you.

If a force majeure event continues for more than thirty days, either party may terminate this agreement on written notice, without liability for the termination itself.

20.1 Informal resolution first. Before starting a formal proceeding, you agree to contact us at [email protected] with a written description of the dispute, the relief you seek, and your account details. We will do the same before making a claim against you. Both parties will attempt in good faith to resolve the matter for 30 days from that notice. This step is a precondition to arbitration, and the limitation period in section 17 is paused while it runs.

20.2 Binding arbitration. If the dispute is not resolved within 30 days, it shall be finally resolved by binding arbitration rather than in court, except as stated in 20.5 and 20.6. The seat of arbitration is Vienna, Austria, and the arbitration shall be administered by the Vienna International Arbitral Centre (VIAC) under its Rules of Arbitration and Mediation in force when the request for arbitration is filed. Where the amount in dispute falls within the threshold for expedited proceedings under those rules, either party may require the expedited procedure to apply. The arbitration shall be conducted in English by a single arbitrator with relevant experience in digital assets or technology disputes. The arbitrator decides the merits and also has exclusive authority to determine the scope, validity and arbitrability of this agreement to arbitrate, except as set out in 20.4.

20.3 Class action waiver. All disputes must be brought in your individual capacity and not as a claimant or class member in a class, collective, consolidated or representative proceeding. The arbitrator may not consolidate more than one person's claims and may not preside over any form of class or representative proceeding. Where 25 or more claimants bring substantially similar claims represented by the same or coordinated counsel, the claims may be batched for administrative efficiency.

20.4 If the class action waiver is unenforceable. If section 20.3 is found unenforceable as to a particular claim or a particular request for relief, that claim or request shall be severed and brought in a court of competent jurisdiction, and the remainder shall proceed in arbitration. Whether 20.3 is enforceable is for a court, not the arbitrator, to decide.

20.5 Mandatory law prevails. Nothing in this section deprives you of the protection of mandatory consumer law. If you are a consumer resident in the European Economic Area, the United Kingdom, Switzerland or another jurisdiction whose law gives you a non-waivable right to bring proceedings in your local courts or to use a statutory dispute resolution scheme, this arbitration agreement does not apply to you to that extent, and you keep every right that law gives you. EU and UK consumers may also use any alternative dispute resolution body competent for them under national law.

20.6 Exceptions. Either party may bring an individual claim in a small-claims court with jurisdiction, and either party may seek urgent injunctive or equitable relief from a court to protect intellectual property rights, prevent unauthorised access, or stop ongoing harm, without first following 20.1.

20.7 Survival. This section survives termination of these Terms and of your account.

Subject to section 20, the courts of the Republic of Kosovo have exclusive jurisdiction.

If you are a consumer, this choice of law does not deprive you of the protection of the mandatory provisions of the law of the country where you habitually reside, and you may bring proceedings there where that law gives you the right to do so.

Where a change is material — one that meaningfully affects your rights or obligations, such as a change to fees, to the dispute resolution section, or to the limitation of liability — we will give notice in-app or by email at least 14 days before it takes effect, unless a shorter period is required by law or by an urgent security or regulatory need. Non-material changes take effect on publication.

Your continued use of the Platform after a change takes effect constitutes acceptance of the modified Terms. If you do not accept a change, stop using the Platform and delete your account before it takes effect. The version of these Terms in force when you submitted a transaction governs that transaction.

23.1 Entire agreement. These Terms, together with the policies incorporated in section 1, are the entire agreement between you and us about the Platform, and supersede all prior understandings, statements and representations, whether oral or written. You confirm that you have not relied on any statement not set out in these Terms.

23.2 Severability. If any provision is held invalid, illegal or unenforceable, it shall be modified to the minimum extent needed to make it enforceable, or severed if that is not possible. The remaining provisions continue in full force.

23.3 No waiver. Our failure or delay in enforcing any provision is not a waiver of it, and a waiver on one occasion is not a waiver on any other.

23.4 Assignment. You may not assign or transfer these Terms or any right under them without our prior written consent; any attempt to do so is void. We may assign or transfer these Terms freely, including in connection with a merger, acquisition, reorganisation or sale of assets.

23.5 Notices. We may give you notice by email to the address on your account, by in-app notification, by posting on the Platform, or by announcement on our official channels. You must keep your email address current; notice is effective when sent. Notices to us must go to [email protected].

23.6 No third-party beneficiaries. These Terms confer no right on any person other than you and us, except that our affiliates, officers, employees, developers, contributors and agents may enforce sections 17 and 18.

23.7 Language. These Terms are published in English. Any translation is provided for convenience only; in the event of a conflict, the English version prevails.

23.8 Survival. Sections that by their nature should survive termination do so — including sections 7 (fees already incurred), 8, 5 (so far as it concerns what we cannot recover, your responsibility for your recovery phrase and passkeys, and your ability to export your wallet), 11, 12, 17,18, 19, 20, 21 and this section 23.

23.9 Relationship. Nothing in these Terms creates a partnership, joint venture, agency, fiduciary or employment relationship between you and us.

23.10 Headings. Headings are for convenience and do not affect interpretation.

• Legal notices, disputes and these Terms — [email protected]
• Abuse, safety, copyright and security — [email protected]
• Privacy and data rights — [email protected]
• General support, account and transaction questions — [email protected]

If a message to an address above bounces, or goes unanswered for more than 72 hours, use our secondary channel, which runs on separate infrastructure: [email protected] for abuse, safety, copyright and security, and [email protected] for legal and data-protection matters. Please keep the original subject line.

By post: Cheese Art Labs L.L.C., Ukshin Hoti 51, Prishtinë, Republic of Kosovo.

We do not provide customer support for trading decisions, for losses caused by user error, or for funds sent to the wrong address or chain. Those are irreversible and outside our control.