Legal Documentation

Terms of Service & Privacy Policy

Clear, transparent guidelines governing the use of Sovereign Auth's high-speed authentication infrastructure.

1. Autonomous Platform & Access Model

Sovereign Auth delivers an autonomous, high-performance licensing and security engine engineered for software developers. The platform operates on a developer-first paradigm with zero subscription fees, hidden charges, or artificial licensing tiers.

By registering an account and deploying Sovereign Auth SDKs (C++, C#, Python, JavaScript, Rust), you are granted unrestricted access to manage applications, generate licenses, verify hardware IDs (HWID), and distribute cloud variables safely.

2. Account Responsibility & Acceptable Use

Account holders maintain sole custody of their login credentials, API secrets, and application authorization keys. Sovereign Auth mandates the use of two-factor authentication (2FA) or Google OAuth verification to protect administrative dashboards.

  • Rate Limiting & Integrity: Automated abuse, DDoS vectors, or attempts to disrupt API endpoints will result in immediate IP termination.
  • No Malicious Payloads: Sovereign Auth file distribution and variable storage may not be used to distribute malware, ransomware, or illicit tools targeting non-consenting parties.
  • Account Sharing: Multi-party credential sharing of developer master accounts without authorized manager or seller roles is prohibited.

3. Privacy Policy & Cryptographic Storage

We uphold strict data minimization principles. Sovereign Auth does not sell, market, or broker developer or end-user telemetry:

Developer Passwords

Salted and hashed via BCrypt before database persistence. Plain-text passwords never touch storage.

Hardware Signatures (HWID)

Device identifiers sent via SDKs are validated for node-locking and anti-sharing protection.

Session Hashing

API communications utilize AES-256-CBC and SHA-256 verification envelopes to deter tampering.

Account Deletion

Developers retain the right to erase applications, generated keys, and profile records at any time.

4. Third-Party Files & API Proxying

Sovereign Auth acts as a secure cryptographic gateway. When developers configure external file downloads in their dashboard, the platform proxies authorized requests directly between the client application and the developer's specified storage. The platform does not host unverified third-party binaries.