LEGAL / SERVICE DETAILS

Service Details

Draft — not yet in force. This page is published for review during the beta. Bracketed items like [DATE] are still being filled in and a lawyer has not yet reviewed the text. It will say "in force" here when that changes.

This page is part of the Terms of Service and holds the current lists the Privacy Policy refers to. It holds everything that changes with the product.

Keep it in sync with the code; the Terms and Privacy Policy should not need editing when it changes.

Notice rules for changes to this page

Price increase or lower limits: at least [14] days’ notice in the app and on our website, under §9.2 of the Terms.
Longer retention periods: at least [14] days’ notice in the app and on our website. Cookies that are not strictly necessary would first require your consent.
Everything else (price decreases, new Hosted Services, changes to the list of processors, shorter retention, new platforms, transfer limits): effective on publication.

Last updated: [DATE]

1. Pricing

Chips are sold through Stripe Managed Payments; merchant of record: Sold through Link, LLC (shown at checkout) · Prices set in USD, may be charged in local currency · Taxes: calculated at checkout
Rate: USD 1 = 100 chips · Top-up packs: USD 5 = 500 chips · USD 10 = 1,000 chips · USD 25 = 2,500 chips
Price lists (current and past, with dates): machine-readable price list at [https://api.fair.ninja/v1/pricing]
Validity of purchased chips: one year from purchase (we may extend it at our discretion, without obligation)
Welcome grant: 100 chips, promotional, valid 90 days
Withdrawal: within 14 days of purchase, refund for the unused chips of the pack (§8.2 of the Terms); after that only in the cases in §9.2 and §9.3
Copy of your data (ZIP): sent within the GDPR time limit; download link valid 7 days. You can also copy your hosted data yourself at any time in the account portal, free of charge — including while your balance is at zero or your wallet is suspended over a disputed payment (an exception to the pause described below and in §7.6/§8.4 of the Terms)
Gifting chips: sender must have a verified e-mail and at least one purchase · purchased chips can be given 7 days after purchase · received chips cannot be passed on · limits: up to 500 chips per day, 2,000 per month
Storage and transfer: storage is charged as used, metered per hour · transfer is metered, with no monthly cap today
Storage limit: 100 MB for accounts that have never bought chips; 10 GB automatically after the first purchase · limits can be raised on request
After the balance runs out: all Hosted Services stop and server data is read-only at once, free of charge; server data deleted after 30 days without a top-up

2. Account parameters

Minimum age: 13 (purchases under 18 with parental consent)
Account deletion grace period: 7 days
Session lifetime: 14 days idle, 30 days max
Personal access tokens expire after: 90 days
Default daily spending cap for Connected Tools: 100 chips/day for an OAuth connection (for example an AI assistant connected through claude.ai); a personal access token has no default cap until you set one
Inactive accounts: deleted after 24 months without sign-in, except accounts holding purchased chips

3. Technical requirements

Web: current Chrome, Firefox, Safari, Edge; JavaScript, IndexedDB and cookies enabled
Android: 10 or newer
Internet connection required for sign-in and Hosted Services; local features work offline.

4. Cookies

We use only cookies that are strictly necessary to keep you signed in and to protect your session: __Host-fn_session (keeps you signed in), fn_csrf (protects your actions against cross-site request forgery), and fn_relogin (a short-lived, 10-minute cookie used only on the sign-in page). When you sign in, our identity provider (Ory Hydra, on the authentication subdomain) sets its own short-lived flow cookies for the login and consent screens; these are also strictly necessary and are never shared with fair.ninja's own pages. None of these require consent. Our marketing websites set no cookies.

5. Processors

Provider	Role	Location
Hetzner Online GmbH	Hosting: servers, database, exports	EU (`[Germany / Finland]`)
`[Google Ireland Ltd / Google LLC — Firebase Authentication]`	Sign-in	`[EU, USA]`
Sold through Link, LLC (Stripe Managed Payments); payment processing: Stripe Payments Company / Stripe Technology Europe, Limited	Reseller and merchant of record for chips; payments (independent controller)	`[Ireland, USA]`
`[Grafana Labs — Grafana Cloud]`	Logs and monitoring	`[EU or USA — confirm]`
`[Cloudflare, Inc.]`	DNS only	`[Global]`
BunnyWay d.o.o. (bunny.net)	Encrypted off-site backups	EU

6. Retention periods

Data	Period
Sync change history	90 days (a separate, shorter internal de-duplication window of 24 hours applies to commands that arrive outside a device's own stream — for example through an assistant connection or a webhook; it does not shorten what you see in your own sync history)
Data copy ZIP files	7 days after the link is sent
Ended session records (incl. IP, user agent)	90 days
Technical logs	`[30 days]`
Backups	14 days, encrypted
Payment and ledger records	`[5 years from end of tax year]`
Correspondence	`[3 years after last message]`
Abuse-prevention hash of deleted accounts	24 months

Changelog

Date	Change
`[DATE]`	First version.

Generated from the repository's docs/legal/service-details.md. Questions: see section 1.