Terms of Service

01Who is agreeing, and to what

"SigChain Guard", "SCG", "we" and "us" mean SigChain Guard, an independently operated software service that is not yet organised as a company. If SCG is later organised as a limited liability company or corporation, these Terms bind that entity as our successor and you will be told.

"You" means the person or organisation creating an account. If you create an account for a studio or company, you confirm you have authority to bind it, and "you" means that organisation as well as you personally.

The "Service" means everything we provide: the website, the developer dashboard, the API, the SDK (the Unity package, the Android library and the native library inside it), the Discord bot, documentation, and support.

By creating an account, ticking the acceptance box at sign-up, or using the Service, you agree to these Terms and to our Privacy Policy, which is part of this agreement. If you do not agree, do not use the Service.

02Eligibility

You must be at least 18 years old to create an account or use the Service. At sign-up you confirm this and we record the confirmation with a timestamp and the version of these Terms you accepted. The Service is a business tool for game developers; it is not directed at children, and we do not knowingly allow anyone under 18 to hold an account. If we learn an account holder is under 18, we will close the account.

You may not use the Service if you are barred from doing so under the laws of the United States or the country you operate from, including export-control and sanctions laws.

03The beta

The Service is currently in an invite-only beta. That has real consequences:

• Accounts require a beta key. We may limit, pause or end the beta, or any account in it, at our discretion.
• Nothing is charged during the beta. The prices shown on the pricing page are planned prices published so you can plan; they may change before paid plans open. Section 8 describes what happens when they do.
• The Service is provided without any uptime commitment during the beta. We do not operate a status page and we do not offer service credits. We will tell you by email or in the dashboard when this changes.
• Features, verdict codes, gates and the SDK's public methods may change with short notice while we work toward launch. We try to keep the documentation current and to flag breaking changes.

04Your account and your API key

You are responsible for your account: keep your password private, keep the email on the account reachable, and tell us promptly at support@sigchainguard.com if you believe the account has been accessed without your permission. If you turn on two-factor authentication, a one-time code is emailed to the account address at each sign-in, so you need access to that mailbox to use the dashboard.

Your API key identifies your game to our servers. It ships inside your application, so treat it as something that can be extracted, not as a secret that cannot leak. You can rotate it from the dashboard. When you do, the old key keeps working for seven days so a build already in store review is not stranded; after that it stops. Rotate only if the key has leaked — changing plan never requires a new key.

You may register only applications you own or are authorised to represent. Registration verifies the signing certificate of your APK; you must not register an application signed by someone else.

05Licence to the SDK

For as long as your account is in good standing, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to install the SDK in games you develop and distribute, and to call the API from those games and from your own game servers, all in accordance with the documentation.

You may not: (a) sell, rent, sublicense or redistribute the SDK on its own; (b) use the SDK or API on behalf of a third party as a service, unless we have agreed in writing; (c) reverse engineer, decompile or disassemble the SDK's native components except to the extent applicable law expressly permits despite this restriction; (d) remove or alter notices in the SDK; or (e) use the Service to build a competing product by copying its functionality.

Reading the SDK's Unity source, or observing what it sends and receives, to understand and integrate it is fine — the security of the Service does not depend on that code staying secret.

06Acceptable use

You agree not to, and not to allow your players or anyone else to:

• Probe, scan, load-test or attack the Service, or attempt to bypass rate limits, authentication, or another customer's protections.
• Send us data you do not have the right to send, including personal information about players beyond what the SDK collects by design (see the Privacy Policy).
• Use the Service to identify, track or profile a person across contexts unrelated to anti-cheat, or to discriminate against anyone unlawfully.
• Use the Service in a game or context that is unlawful where it is offered, or that violates the platform rules of the store it ships through.
• Misrepresent the Service or its results to your players, for example by claiming a device was "hacked" when the Service returned a signal you chose to treat as a failure.
• Share beta keys, resell access, or create accounts with false information.

We may suspend or terminate accounts that break these rules, and we may do so first and explain afterwards when players or other customers are at risk.

07What a verdict is — and is not

The Service returns a signal about a device and a session: a result code and the checks behind it. It does not ban anyone. You decide what your game does with a result, which checks count as failures, which are warnings, and whether a device is blocked, flagged or allowed. That decision, and any appeal your players make about it, is yours.

No anti-cheat system is complete. Determined attackers, rooted or modified hardware, operating-system updates, unusual devices and bugs on our side can all produce results that are wrong in either direction. We do not warrant that the Service will detect every cheat or that it will never flag a legitimate player. Treat results as input to moderation, not as proof.

Where the Service reports a device's own claims about itself (for example software-integrity signals collected on the headset), those claims are exactly that. The documentation and the how-it-works page say which checks are backed by hardware attestation and which are not.

08Plans, billing and payment (when paid plans open)

This section applies from the day paid plans open. We will announce that day by email and in the dashboard at least 14 days in advance, together with the final prices.

Merchant of record

Payments will be processed by Lemon Squeezy, which acts as the merchant of record: it charges your card, issues invoices, collects and remits applicable sales tax and VAT, and handles refunds under its own terms in addition to ours. We never see or store card numbers.

Plans and limits

Each plan has a monthly active player limit and other limits described on the pricing page. Only verified players count toward the limit — traffic that fails validation is not metered. If you exceed your limit in a month, the overage rules published on the pricing page at that time apply; today's published plan is a two-step ladder (110% then 125%) with no charge for the excess itself.

Changes to price

We may change prices with at least 30 days' notice by email. Price changes apply from your next billing period after the notice; if you do not agree, cancel before it takes effect.

Cancellation and refunds

You can cancel at any time from the dashboard; your plan continues until the end of the period already paid for. Refunds follow Lemon Squeezy's refund policy. In addition, if the Service was materially unavailable through our fault for a substantial part of a billing period, tell us and we will refund or credit that period in good faith — this is a promise about how we behave, not a service-level agreement.

Taxes

Prices exclude taxes unless the checkout says otherwise. Where the merchant of record does not collect a tax that applies to you, you are responsible for it.

09Your players and their data

For data the SDK collects from your players' devices, you are the controller (the party that decides why the data is processed) and we are your processor or service provider, acting on your instructions as described in the Privacy Policy and the documentation. You are responsible for:

• Telling your players, in your own privacy notice, that your game uses SigChain Guard and what it collects.
• Having a lawful basis for that processing where the law requires one, and honouring your players' rights.
• Complying with laws that apply to your game and your players — including COPPA if your game is directed at children under 13 in the United States, and the GDPR or UK GDPR if you have players in Europe.
• Not configuring the Service to collect more than it is designed to collect, and not sending us player names, emails, account identifiers or other personal details.

We will process player data only to provide the Service to you, will not sell it, and will delete or return it as set out in the Privacy Policy. If you need a signed data processing agreement, email us and we will put one in place.

10Ending the relationship

By you. You can stop using the Service at any time and ask us to close your account by emailing support@sigchainguard.com from the account's address. Closing an account ends your licence to the SDK; games already shipped will start receiving connection failures once the key is retired.

By us. We may suspend or terminate your account if you break these Terms, if we are required to by law, if the beta or the Service is discontinued, or if your account has been inactive for more than twelve months after we have emailed you twice about it. Where it is reasonable to do so, we will give you notice and a chance to fix the problem first.

What survives. Sections 7, 9, 11 through 16 and anything else that by its nature should survive, survives termination. What happens to data on closure is described in the Privacy Policy.

11Intellectual property

We own the Service, the SDK, the documentation and everything in them, including the SigChain Guard name and mark. Your games, your code and your players' relationships with you are yours; nothing here transfers them to us.

If you send us feedback or suggestions, you allow us to use them without obligation to you. We will not name you as a customer or use your game's name or logo publicly without asking first.

12No warranty

The Service is provided "as is" and "as available", without warranties of any kind, whether express, implied or statutory, including any implied warranty of merchantability, fitness for a particular purpose, non-infringement or uninterrupted operation. This is a beta of a security product built on hardware and platforms we do not control. We do not warrant that it will be error-free, that it will detect any particular cheat, or that results will be available at any particular time. Some jurisdictions do not allow certain warranties to be disclaimed; in those places this section applies to the fullest extent the law allows.

13Limitation of liability

To the fullest extent the law allows, SigChain Guard will not be liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of revenue, profits, players, goodwill or data, however caused and under any theory of liability, even if we were told such damages were possible.

Our total liability to you for everything arising out of or relating to these Terms or the Service, in any twelve-month period, will not exceed the greater of (a) the fees you paid us in that period and (b) one hundred US dollars (US$100). During the free beta, that means US$100.

These limits do not apply where the law does not permit them to — for example, to liability for fraud, or for death or personal injury caused by negligence — and they do not limit either party's liability under Section 14.

14Indemnity

You will defend and indemnify SigChain Guard against third-party claims, and the reasonable costs of dealing with them, that arise from: your games; the way you use the Service or act on its results toward your players; your breach of these Terms; or your failure to comply with laws that apply to your game and your players (including privacy and children's-privacy laws). We will tell you promptly about any such claim, let you control the defence, and cooperate reasonably at your expense.

15Governing law and disputes

Governing law

These Terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-law rules, and by the Federal Arbitration Act as to Section 15. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Talk to us first

Before starting any formal proceeding, email support@sigchainguard.com with a description of the problem and what you want us to do about it. We will do the same if we have a claim against you. Both sides will try in good faith to resolve it within 30 days. Most problems end here.

Arbitration

If we cannot resolve it informally, any dispute arising out of or relating to these Terms or the Service will be settled by binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, before a single arbitrator. The arbitration will be conducted in English by videoconference, unless both sides agree to meet in person or the arbitrator decides an in-person hearing is necessary. The arbitrator may award the same relief a court could award to you individually. Judgment on the award may be entered in any court with jurisdiction.

Class-action waiver

Disputes will be arbitrated only on an individual basis. Neither side may bring or join a class, collective or representative action, and the arbitrator may not consolidate claims of different customers. If this waiver is found unenforceable for a particular claim, that claim must be brought in court, not in arbitration, and the rest of this section still applies.

Exceptions

Either side may bring an individual claim in small-claims court if it qualifies, and either side may ask a court for an injunction to stop infringement or misuse of intellectual property or unauthorised access to the Service. For those court proceedings, both sides consent to the state and federal courts located in the State of Delaware.

Opt-out

You may opt out of arbitration and the class-action waiver by emailing support@sigchainguard.com with the subject line "Arbitration opt-out" within 30 days of first accepting these Terms. Opting out does not affect any other part of the Terms.

Time limit

Any claim must be brought within one year of the day it arose, unless the law does not permit that limit.

16Changes to these Terms

We may update these Terms. For material changes we will email the account address and show a notice in the dashboard at least 14 days before they take effect, and the version and date at the top of this page will change. Continuing to use the Service after that date means you accept the new Terms; if you do not, close your account before then. Changes that only fix typos, clarify wording or reflect a new legal name take effect when posted.

17General

• Entire agreement. These Terms and the Privacy Policy are the whole agreement between us about the Service and replace any earlier version.
• Severability. If a court or arbitrator finds part of these Terms unenforceable, the rest stays in force.
• No waiver. Not enforcing a right once does not give it up.
• Assignment. You may not assign these Terms without our consent. We may assign them to a successor that takes over the Service, including a company we form to run it, and will tell you when we do.
• Force majeure. Neither side is liable for delays or failures caused by events outside its reasonable control, including outages at our hosting or platform providers, network attacks, and changes made by headset or store operators.
• Export and sanctions. You confirm you are not on a US sanctions list and will not use the Service in a way that breaks export-control laws.
• Notices. We send notices to your account email; you send notices to support@sigchainguard.com. Notices are effective when sent to the right address.
• Language. These Terms are written in English; any translation is for convenience only.

18Contact

Questions about these Terms: support@sigchainguard.com. We try to answer within a few business days.

Version 2.0 · effective 19 September 2026. Changes from v1.1: Delaware named as governing law; minimum age raised to 18 with a recorded confirmation at sign-up; beta section added and the uptime target, outage credits and refund windows removed until we can measure and honour them; merchant-of-record billing described; controller/processor roles for player data made explicit; arbitration moved to videoconference with a 30-day opt-out; governing law stated.