Terms of Service

1. The alpha service

multAIplayer is free, experimental, open-source collaboration software. The official service consists of this static website, GitHub-based sign-in, and an official relay running on Railway. The supported public-alpha desktop target is an Apple silicon Mac running macOS 11 or later. The free alpha has no uptime or continuity guarantee.

The alpha may contain bugs, lose or delay encrypted relay data, change protocol or storage formats, become incompatible with older rooms or Codex versions, or require manual recovery. It has not received an independent security audit. It is not designed for emergency, medical, financial, legal, regulated, safety-critical, or other use where failure could cause material harm.

2. Eligibility and responsibility

You must be at least 18 years old, able to form a binding contract, and legally permitted to use the service. If you use it for an organization, you represent that you have authority to bind that organization.

You are responsible for your GitHub and Codex accounts, devices, collaborators, project backups, Git history, credentials, approvals, local commands, repositories, and compliance obligations. Room members are not anonymous spectators: admitted members may receive shared project context and request consequential actions. Invite only people you trust and review every host approval.

3. GitHub, Codex, repositories, and third parties

A GitHub account is required for the official relay. Initial workspace sign-in requests only read:user. Optional pull-request and Actions workflows ask for a separate, explicit repo device grant, which is broad read-and-write access to public and private repositories available to your GitHub account. Native code stores the two grants separately, verifies that they identify the same account, and sends only the identity token to the relay for one-time verification. Local Git commands and pushes separately use credentials available on the active host. Hosting a Codex room requires your own eligible Codex access.

You must have permission to access and share every repository, file, account, prompt, attachment, and other material you use. GitHub, OpenAI/Codex, Railway, Netlify, Git remotes, websites, package registries, tunnel providers, and other third parties have their own terms and may change or discontinue their services. multAIplayer is independent and is not affiliated with, endorsed by, or sponsored by OpenAI.

4. Local authority and security boundaries

The active host controls a real machine. Approved Codex turns, terminal commands, subprocesses, file operations, browser opens, Git/GitHub operations, and preview tools may read data, change the selected project, use accounts and environment variables, start child processes, and communicate over the network. Filesystem confinement and warnings reduce risk but do not make approved code, collaborators, dependencies, or websites safe.

You must review proposed actions and use least-privileged test accounts and disposable data where appropriate. Never treat encryption, redaction, sandboxing, secret detection, or host approval as a substitute for backups, access controls, code review, and professional security judgment.

5. Your content and open-source license

You retain ownership of your content. You grant Flared Inc. a limited license to host, transmit, process, reproduce, and delete content only as needed to operate, secure, support, and comply with law for the service. Your instructions and room membership determine which collaborators receive shared material.

The source code is licensed separately under the Apache License 2.0. These Terms govern the official website and hosted service and do not replace the open-source license for code you download, modify, or self-host. Contributions to project repositories are governed by the repository’s contribution terms and applicable license.

6. Acceptable use

You may not use the service to:

• break the law, violate another person’s rights, or access systems, accounts, repositories, or data without authorization;
• distribute malware, exploit code against non-consenting targets, stolen credentials, unlawful content, or material that infringes intellectual-property or privacy rights;
• harass, threaten, defraud, impersonate, dox, or facilitate abuse of another person;
• probe, evade, disable, or overwhelm authentication, rate limits, quotas, security controls, the relay, or its providers except through authorized good-faith security research;
• share invite capabilities publicly, harvest user data, operate unsolicited messaging, or use the service as general-purpose file hosting, proxying, mining, or automated traffic infrastructure;
• interfere with other users or place unreasonable load on a free alpha service.

Report vulnerabilities privately as directed in the project’s SECURITY.md. Do not include active invite links, real credentials, private code, or personal data in public issues.

7. Privacy and deletion

Our Privacy Policy explains what the website, app, and relay handle. There is no separate password or billing account; your GitHub-linked hosted identity functions as the relay account. You may select Delete hosted account data in the app’s Profile drawer, subject to first transferring or deleting any team you own and handing off or deleting every non-deleted room you host. Shared encrypted records may remain for their documented retention and integrity purposes.

8. Suspension, termination, and shutdown

You may stop using the service, sign out, revoke GitHub authorization, delete your hosted relay identity, and remove local software at any time. We may limit, suspend, or terminate access; remove data; or block traffic when reasonably necessary for abuse, security, legal compliance, provider requirements, operational risk, or a violation of these Terms. When practical, we will provide notice and an opportunity to remedy.

We may change or discontinue any part of the free alpha. For a planned shutdown of the official relay, we intend to provide at least 30 days’ public notice when safely and reasonably possible. Security incidents, law, provider failure, or other emergencies may require immediate action. You are responsible for keeping project and Git backups and exporting anything you need.

9. No fees or support commitment

The official alpha is currently provided without charge. We do not promise that it will remain available, free, or unchanged. We may introduce limits or future paid services only with notice; these Terms do not authorize us to charge you without a separate transaction.

Support is best-effort through project documentation, GitHub issues, and maddie@maddiedreese.com. There is no service-level agreement, guaranteed response time, compatibility commitment, data-recovery service, or obligation to provide maintenance, updates, or security fixes.

10. Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE AND SOFTWARE ARE PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, SECURITY, ACCURACY, AVAILABILITY, OR DATA PRESERVATION. WE DO NOT WARRANT THAT ENCRYPTION, SANDBOXING, REDACTION, APPROVALS, THIRD-PARTY SERVICES, OR THE ALPHA WILL PREVENT LOSS, DISCLOSURE, OR UNAUTHORIZED ACTION.

Nothing in these Terms excludes a warranty or right that applicable law does not allow us to exclude.

11. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, FLARED INC. AND ITS DIRECTORS, OFFICERS, EMPLOYEES, CONTRIBUTORS, AND PROVIDERS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF DATA, CODE, PROFITS, REVENUE, GOODWILL, SECURITY, OR BUSINESS INTERRUPTION, ARISING FROM OR RELATED TO THE SERVICE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY FOR ALL CLAIMS ARISING FROM OR RELATED TO THE FREE SERVICE WILL NOT EXCEED US $100. These limits apply regardless of the legal theory and even if a remedy fails of its essential purpose. They do not apply where prohibited by law.

12. Indemnity

To the extent permitted by law, you will defend, indemnify, and hold harmless Flared Inc. and its directors, officers, employees, and agents from third-party claims, liabilities, damages, and reasonable costs arising from your content, your misuse of the service, your violation of these Terms, or your violation of another person’s rights. This does not apply to the extent a claim results from our own unlawful conduct.

13. Governing law and disputes

California law governs these Terms, without regard to conflict-of-law rules. State and federal courts located in California will have exclusive jurisdiction over disputes arising from these Terms or the service, and you and Flared Inc. consent to their jurisdiction and venue. Before filing a claim, please email maddie@maddiedreese.com and allow 30 days for an informal resolution. This section does not prevent either party from seeking urgent injunctive relief or using a court process that applicable law requires.

14. General terms

These Terms and the Privacy Policy are the entire agreement about the official service. If a provision is unenforceable, the remainder stays effective. Our failure to enforce a term is not a waiver. You may not assign these Terms without our consent; we may assign them as part of a reorganization, financing, acquisition, or transfer of the service. No third party is a beneficiary.

We may update these Terms by posting a revised version and effective date. Material changes will receive additional notice when reasonably possible. Continuing to use the service after revised Terms take effect means you accept them. These Terms are effective July 17, 2026. Questions may be sent to maddie@maddiedreese.com.