Terms of use

These Terms of Use (the "Terms") govern your access to and use of the software, documentation and websites published by the Keyfount Project (the "Project", "we", "us"). By installing, running, accessing or otherwise using any component of the Service defined below, you (the "User", "you") acknowledge that you have read, understood and agreed to be bound by these Terms. If you do not agree, do not install or use the Service.

1. Definitions

• Project — the Keyfount Project, an open-source software project maintained by the contributors listed in the public repositories under github.com/Keyfount.
• Software — the source code and compiled artefacts published by the Project, including the browser extension, the desktop and mobile applications, the optional self-hostable sync server and any ancillary tooling.
• Website — the website available at keyfount.github.io and any subdomain operated by the Project, including its documentation and interactive demonstrations.
• Service — the Software and the Website, collectively.
• Self-Hosted Instance — any deployment of the sync server software performed by a User on infrastructure under that User's control. Self-Hosted Instances are operated by the User, not by the Project.

2. Licence and intellectual property

The Software is distributed under the terms of the MIT licence. The full text of the licence is included in every source repository and prevails over these Terms with respect to your rights in the source code. Subject to that licence, you may use, copy, modify, merge, publish, distribute, sublicense and sell copies of the Software, provided that the copyright notice and the licence text are preserved.

All trade marks, logos and graphic identity elements associated with the name "Keyfount" are the property of the Project and may not be used in a way that suggests endorsement of, or affiliation with, a derivative work or third-party service without prior written permission.

3. Description of the Service

The Service is a deterministic password manager. It derives passwords on your device from inputs you control (a master password, a registrable site domain, an account identifier and a per-site profile). The Service does not maintain a password vault and does not transmit your master password, derived passwords or account identifiers to the Project's infrastructure. The Website performs the same derivation locally for demonstration purposes.

4. No account; no authentication with the Project

Use of the Service does not require the creation of an account with the Project. The Project does not authenticate Users, does not maintain user profiles and does not process credentials on its infrastructure.

5. Acceptable use

You agree not to:

• use the Service to derive, recover or attempt to recover credentials relating to accounts you are not lawfully authorised to access;
• circumvent, disable, interfere with or otherwise impair the integrity, security or availability of the Service or of any third-party service with which the Service interacts;
• use the Service in connection with any activity that violates applicable law, including data-protection, intellectual-property, export-control and anti-fraud legislation;
• misrepresent yourself as the Project, a maintainer or a contributor, or use the Project's name, logo or identity in a misleading manner.

6. Self-hosted sync server

The Project publishes the source code and container images of an optional sync server. A User who chooses to operate a Self-Hosted Instance does so on infrastructure under that User's sole responsibility. With respect to such an instance, the User acts as the data controller and as the operator of the service. The Project is neither a controller nor a processor of any data transmitted to a Self-Hosted Instance and provides no service-level commitment in respect of any such deployment.

7. Third-party distribution channels

The Software may be distributed through third-party stores (including the Chrome Web Store, Mozilla Add-ons, Microsoft Edge Add-ons, Apple App Store and Google Play). Your installation and use of the Software from such a channel are additionally governed by that channel's own terms of service. The Project is not affiliated with, sponsored by or endorsed by any of these channels.

8. Export control and cryptography

The Software incorporates standard cryptographic primitives (notably Argon2id and the Web Crypto API). You are responsible for ensuring that your use, import, export and re-export of the Software complies with the laws and regulations applicable in your jurisdiction.

9. No warranty

The Service is provided "as is" and "as available", without warranty of any kind, whether express, implied or statutory, including but not limited to the warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement and uninterrupted availability. You alone are responsible for the master password you choose, for the per-site configurations you store locally and for any consequences of using the derived passwords with third-party services.

10. Limitation of liability

To the maximum extent permitted by applicable law, the Project, its maintainers and its contributors shall not be liable for any direct, indirect, incidental, special, consequential, exemplary or punitive damages — including, without limitation, loss of data, loss of profits, business interruption, account lockouts, identity theft or unauthorised access to third-party services — arising out of or in connection with the Service, whether based in contract, tort (including negligence), strict liability or any other legal theory, even if the Project has been advised of the possibility of such damages.

11. Suspension and termination

You may discontinue your use of the Service at any time by uninstalling the Software and ceasing to access the Website. The Project may, at any time and without prior notice, discontinue all or part of the Service, publish breaking changes or remove releases from distribution channels. Nothing in these Terms creates a perpetual right to a specific version or feature of the Service.

12. Modifications to the Terms

The Project may revise these Terms from time to time. The "Last updated" date above reflects the most recent material change. Continued use of the Service after the publication of revised Terms constitutes acceptance of the revised Terms. If you do not accept the revised Terms, you must cease using the Service.

13. Severability and waiver

If any provision of these Terms is held to be invalid, illegal or unenforceable, the remaining provisions shall remain in full force and effect. The failure of the Project to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.

14. Entire agreement

These Terms, together with the MIT licence applicable to the Software and the Privacy Policy and Security & Disclosure pages incorporated herein by reference, constitute the entire agreement between you and the Project relating to your use of the Service and supersede any prior agreement on the same subject matter.

15. Governing law and jurisdiction

These Terms are governed by and construed in accordance with the laws of France, without regard to its conflict-of-laws provisions. Any dispute arising out of or in connection with the Service that cannot be resolved amicably shall be submitted to the exclusive jurisdiction of the competent courts of Paris, France, subject to any mandatory consumer-protection rules of your country of residence.

16. Contact

Questions regarding these Terms may be addressed to legal-keyfount@loule.me. General correspondence may be sent to contact-keyfount@loule.me or filed as a public issue at github.com/Keyfount.