playnet · terms of use · privacy notice ← back to the dial

Terms of Use

Version 1.0.0 · effective 2026-08-01 · applies to the gateway operated by [operator not configured — see docs/legal/README.md]

Read this before you create an identity. Three things here cannot be undone later and are unlike most services you have used: your passcode is the only key to your identity and cannot be reset; parts of what you create are published to other machines and cannot be recalled; and this is unfinished software run by a small collective, not a company with a support desk.

1. What this is, and who you are agreeing with

playnet is an economic planner for a federation of communes. It records what people need, what they can make, and what labour they have contributed, and it computes an allocation — a plan — over that record. It is free software under the GNU Affero General Public License v3.0 with additional terms (see LICENSE.md and LICENSE-ADDITIONAL-TERMS.md in the source tree).

The software's authors are not your counterparty. Anyone can run a playnet gateway. The one you are signing into is operated by [operator not configured], in [jurisdiction not configured], and it is that operator — referred to below as the operator, "we" or "us" — who provides you this service and with whom this agreement is made. The people who wrote the software are not party to it and have no relationship with you.

1.1 Federation

Communes federate. A gateway shares credentials, plans and identity records with other gateways run by other operators under their own terms and their own law, which we neither set nor control. When something you create is shared into the federation, it leaves our reach in exactly the way described in §4.

2. Your identity, and the passcode that is its only key

Creating an identity mints a KERI autonomic identifier (an "AID"), which is what names you everywhere in the system. Your browser generates a random passcode and derives your signing keys from it locally. The passcode is never transmitted to us and never stored on any server. We hold your public keys; we never hold your private ones.

There is no password reset, and there is no recovery. Nobody — not the operator, not the authors — can restore access to an identity whose passcode has been lost, because nobody else ever had it. If you lose the passcode, the identity, the credentials attached to it, and any labour credit recorded against it are unreachable, permanently. Save the recovery file or put the AID and passcode in a password manager when they are shown to you. They are shown once.

You are responsible for:

keeping the passcode secret and durable — treat it as you would a house key you cannot re-cut;
everything done by your identity, since a valid signature from your key is, to every other participant, indistinguishable from you;
telling us promptly if you believe your key has been compromised, so we can help you rotate it (KERI supports key rotation; it is the intended response to compromise, and it works only while you still control the current key).

3. Verification and vouching

To keep out spam and vote-stuffing, a member's standing as a unique real person is attested by other verified members. If you vouch for someone, or grant them verification, you are making a signed statement that you have grounds to believe they are a distinct real person. Do not vouch for identities you cannot vouch for. Vouching falsely — to inflate voting weight, to claim goods twice, or to admit someone excluded by governance — is a breach of these terms and is visible in the record.

4. What becomes public, and what cannot be taken back

This is the section most unlike an ordinary service, and the one worth reading twice.

4.1 Your key history is published

Every AID has a key event log (KEL): its creation, and every subsequent key rotation, each signed and timestamped. The KEL is served over this gateway's discovery endpoint and is broadcast to witnesses — independent machines, run by other people, potentially in other countries — whose whole purpose is to hold copies so that nobody, including us, can quietly rewrite your history. That is the security property you are getting. Its price is that the KEL cannot be deleted, edited or holed once it has propagated. On its own it names a pseudonym, not a person: it contains no name, email or address.

4.2 Credentials are append-only

Work recorded, goods claimed, skills held, verification granted, relationships declared and votes cast are written as signed credentials, addressed by the hash of their contents and anchored in the issuing scope's KEL. Revoking a credential marks it invalid; it does not remove it. The fact that a credential was issued, and when, is permanent by design — that anchor is what makes the whole record auditable.

Deletion is not implemented today. The reference implementation has no automated path to erase a member record, a credential body or a stored key event. Erasure requests are handled by the operator manually, to the extent they can be honoured at all; §5 of the privacy notice sets out exactly what can and cannot be erased and what we are building to close the gap. Do not put anything into this system on the assumption that you can take it out again.

4.3 What you should not put in

Fields such as your display name, email, location and the free text you attach to needs, offers and proposals are shared with other participants and, through federation, with other gateways. Unless you intend them to be durably visible to your federation, do not enter:

your legal name, home address, or precise home location;
phone numbers, government identity numbers, bank or payment details;
health information, or anything else about you that you would not say in a general meeting;
information about other people — including their contact details or their whereabouts — without their agreement. If you enter data about someone else, you are responsible for having the right to do so.

5. The plan is a computation, not a promise

playnet computes an allocation by convex optimization over the federation's recorded needs, capacities and limits. What comes out is a proposal — a plan the federation may adopt, amend or reject through its governance. Specifically:

an allocation shown to you is not an entitlement and creates no legal claim against the operator or any other member;
labour credit is an internal accounting unit. It is not money, not a deposit, not a security, and not a claim on anyone's assets. It is not redeemable for cash by us. It has no value outside the federation that recognises it, and a federation may revalue or discontinue it through governance;
where a claim path touches actual currency (including any cryptocurrency), the transaction is between you and the counterparty concerned. We do not hold funds for you, do not act as an exchange, custodian or payment institution, and take no responsibility for the transaction;
the planner's outputs may be wrong. It is optimization software under active development operating on data other members entered.

6. Governance decisions

Decisions about this federation — including admission, verification, allocation policy and changes to the rules — are made through the governance process, by its members, not by the software authors and not unilaterally by the operator except where these terms say otherwise. If you disagree with a decision, the route is the governance process. Casting a vote is recorded as a signed credential; see the privacy notice, §3 for how that record is protected and what its limits are.

7. Acceptable use

You agree not to use this gateway to:

break the law of your jurisdiction or of [operator jurisdiction not configured];
harass, threaten, defame or endanger anyone, or to publish another person's private information;
misrepresent labour performed, goods delivered or goods claimed, or otherwise falsify the record the plan is computed from;
create multiple identities to gain additional voting weight or additional claims;
attack the service or its peers — denial of service, exploitation of vulnerabilities, circumvention of access controls, or scraping the discovery endpoints to build a directory of participants.

Finding a security vulnerability is welcome; exploiting it is not. Report it to [operator contact not configured].

8. Age

You must be at least 16, or the minimum age for consent to information-society services in your country if that is higher, and legally able to enter this agreement. Where a lower age applies in your country, a parent or guardian must agree on your behalf and is responsible for your use. The operator may set a higher minimum age; if so it is stated at [operator contact not configured].

9. Beta software, provided as-is

This is experimental software under active development, run for its members, not a commercial product. To the maximum extent permitted by law and without limiting any right you have as a consumer that cannot be waived:

the service is provided "as is" and "as available", with no warranty of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement;
we do not warrant that it will be available, correct, uninterrupted, secure, or that data will be preserved. Data may be lost, corrupted or become unreachable;
our aggregate liability to you is limited to zero, and we are not liable for indirect, incidental, consequential or punitive damages, for lost data, for lost labour credit, for a lost or compromised passcode, for what the planner allocated, for what other members or other gateways did with information you shared, or for anything that follows from the permanence described in §4;
you use this service at your own risk.

Some jurisdictions do not allow these exclusions. Where that is so, they apply only as far as the law allows, and nothing here excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded.

9.1 Indemnity

You agree to hold the operator harmless from claims arising out of your breach of these terms, your unlawful use of the service, or information you entered about other people without the right to do so. This does not apply to the extent the claim arises from the operator's own wrongdoing.

10. Ending it

You may stop at any time. Nothing obliges you to keep participating. On request we will remove your member record and the link between your AID and your name and contact details, as far as our implementation allows — which is the meaningful erasure available here, and is set out honestly in the privacy notice, §5. We cannot recall your KEL from witnesses or credentials from other gateways.

We may suspend or end your access if you materially breach these terms, if your continued access endangers other members or the service, or if we discontinue the gateway. Except where an immediate stop is needed, we will tell you why and you may raise it through the governance process. If the gateway shuts down, the software is free — the federation, or you, can run another.

11. Changes to these terms

These terms may change as the software does. Material changes are published here with a new version number and effective date, and you will be asked to accept them again the next time you sign in. Continuing to use the gateway after a change means you accept it; if you do not, stop using it and ask us to remove your record.

12. Law and disputes

These terms are governed by the law of [jurisdiction not configured], without prejudice to any mandatory protection you have under the law of your own country of residence. Please raise disputes with us first, and through the governance process where the subject is a federation decision; we will try in good faith to resolve them before anyone goes to court.

13. Contact

Operator: [not configured]
Contact: [not configured]
Postal address: [not configured]

14. What you are agreeing to

By creating an identity on this gateway, you confirm that you understand:

your passcode is the only key to your identity, is held by nobody but you, and cannot be recovered;
your key event log is published and mirrored to independent witnesses and cannot be recalled;
credentials — work, claims, verification, votes, relationships — are append-only, and automated deletion is not implemented today;
allocations are computed proposals under governance, and labour credit is not money;
this is beta software provided as-is, with liability limited to zero;
you are responsible for what you put in, especially information about other people;
you meet the age requirement in §8.