Cartograph Cloud Registry — Terms of Service (v5)

By using the Cartograph cloud registry you agree to the following:

1. CODE VALIDATION AND USE AT YOUR OWN RISK
   All widgets in the Cartograph registry are validated LOCALLY by the
   uploader's machine only. The registry does not perform server-side
   code review, sandboxed execution, or security auditing of uploaded
   widgets. Any code you download and install may contain bugs, security
   vulnerabilities, or malicious behavior. YOU ARE RESPONSIBLE for
   reviewing all widget code before use. Cartograph makes no guarantees
   about the safety, correctness, or security of any published widget.
   Always inspect source code, check dependencies, and test in an
   isolated environment before deploying to production.

2. AI TRAINING DATA
   All widgets published to the Cartograph cloud registry with "public"
   visibility may be used as training data for artificial intelligence
   and machine learning models. This includes but is not limited to
   source code, documentation, examples, tests, and metadata. Cartograph
   may package and distribute published widgets to AI research labs and
   model providers at any time. If you do not want your code used for
   AI training, do not publish it to the cloud registry.

3. ACCEPTABLE USE
   You will not publish widgets that contain malware, deliberately
   obfuscated code designed to harm users, or content that violates
   applicable law. Widgets must not collect user data without disclosure
   or attempt to exploit systems they are installed on. Reviews,
   comments, and all user-generated text must not contain harassment,
   hate speech, threats, or spam.

4. PROHIBITED CONTENT — ZERO TOLERANCE
   The following will result in immediate, permanent account termination
   and may be reported to law enforcement:
     - Child sexual abuse material (CSAM) or any sexualized content
       involving minors
     - Non-consensual intimate imagery
     - Content that facilitates terrorism, human trafficking, or the
       distribution of controlled substances
     - Any material that is illegal under United States federal law
   There are no warnings for these violations. Your account, all
   published content, and associated data will be permanently deleted.

5. ENFORCEMENT AND BANS
   Other violations of these terms may result in any or all of the
   following at Cartograph's sole discretion and without prior notice:
     - Removal of individual widgets or reviews
     - Temporary suspension of publishing privileges
     - Permanent ban of your account and all associated content
   Repeated or severe violations (e.g. publishing malware, targeted
   harassment, or circumventing prior enforcement) will result in a
   permanent ban. Bans are final and not subject to appeal.

6. UNIVERSAL MIT LICENSE
   All widgets published to the Cartograph registry are distributed
   under the MIT License. By publishing a widget you agree to release
   it under MIT and represent that you have the right to do so. By
   downloading a widget you receive it under the MIT License. There is
   no option to choose a different license — this keeps licensing simple
   and predictable for all consumers, including automated systems and
   AI agents. The full MIT License text applies to every widget:
   permission is granted, free of charge, to use, copy, modify, merge,
   publish, distribute, sublicense, and/or sell copies, subject only to
   the inclusion of the copyright notice and permission notice. The
   software is provided "as is", without warranty of any kind.

7. INTELLECTUAL PROPERTY
   You retain copyright ownership of code you publish. By publishing,
   you grant Cartograph a perpetual, worldwide, royalty-free license to
   host, distribute, and include your widget in AI training datasets as
   described in section 2. The MIT License grant in section 6 is
   irrevocable for versions already published — you may unpublish future
   versions but cannot revoke the license on copies already distributed.

8. CONTENT MODERATION
   Cartograph employs automated content filtering and reserves the right
   to review any published content. Attempting to circumvent content
   filters is itself a violation of these terms.

9. NO WARRANTY
   The registry is provided "as is" without warranty of any kind. We do
   not guarantee uptime, data preservation, or fitness for any purpose.

10. USAGE ANALYTICS
   Cartograph collects aggregate daily counts to monitor service health
   and growth: number of signups, number of widget installs (split into
   authenticated and anonymous), per-widget install tallies, and the
   number of distinct authenticated users active each day. We do NOT
   record which specific user installed which specific widget — install
   counts and user identities are stored independently and are never
   joined. Authenticated user identifiers used for daily-active-user
   deduplication are retained for at most 24 hours and then irreversibly
   replaced with a count. Anonymous installs are recorded without any
   user identifier or IP address; to keep install counts honest, a
   one-way hash derived from the requester and widget is kept for at
   most 48 hours to deduplicate repeat downloads, then deleted. The
   hash cannot be reversed into an IP address and is never joined with
   any other data. Aggregated counts may be used to improve
   recommendations, surface trending widgets, and report on service
   usage.

11. REPORTING ABUSE
   Report widgets, reviews, or accounts that violate these terms via
   POST /v1/abuse (see the API docs) or the form at
   https://cartograph.tools/abuse. Include the widget or handle and a
   short description. DMCA takedown requests should identify the
   copyrighted work, the infringing widget, and your contact details.

12. CHANGES
   These terms may be updated at any time. You will be prompted to
   accept the new version on your next login. Continued use after
   being prompted constitutes acceptance.