Legal
Terms of Service
Last updated: January 2026
1. What Arca Is
Arca provides entropy infrastructure. We collect, verify, and deliver human-generated randomness to applications that need it.
We are:
- Infrastructure provider (like AWS, Stripe, or a utility company)
- Entropy verification and aggregation service
- B2B service for enterprises needing verified randomness
We are not:
- A consumer-facing application
- A token issuer or financial service
- An employer of entropy contributors
If you're a user generating entropy through an application like Gambino, that application's terms govern your relationship with them. Arca provides the underlying infrastructure they use.
2. Definitions
| Term | Meaning |
|---|---|
| Arca | Arca Protocol and its associated infrastructure services |
| Entropy | Verified randomness derived from human actions (tap timing, motion, decisions) |
| Supplier | Application or platform that integrates Arca SDK to collect entropy (e.g., Gambino) |
| Consumer | Enterprise or application that purchases verified entropy from Arca |
| Contributor | Individual whose actions generate entropy through a Supplier's application |
| Packet | A unit of collected entropy data from a single interaction session |
| Batch | Aggregated, anonymized entropy ready for Consumer use |
3. The Two-World Architecture
Arca operates on a strict separation between user data and entropy output:
Attribution World (Private)
- Links packets to contributors
- Stores entropy source data (timing, motion)
- Tracks contribution history and rewards
- Never exposed to Consumers
Entropy World (Public)
- Contains only aggregated, anonymized entropy
- No user identifiers
- No input patterns
- Cryptographically anchored for verification
This separation is architectural, not policy-based. Consumers literally cannot access contributor identity or entropy source data because it doesn't exist in the systems they interact with.
4. Supplier Terms
If you integrate Arca as a Supplier (SDK integration, API access):
4.1 Registration
- You must register and provide accurate business information
- You will receive cryptographic keys for authentication
- You are responsible for key security
4.2 SDK Usage
- Use the SDK as documented
- Do not attempt to bypass entropy verification
- Do not submit synthetic or bot-generated data
- Maintain reasonable quality standards for contributor experience
4.3 User Relationships
- You own the relationship with your users, not Arca
- Your terms govern user participation, rewards, and data collection
- You may use supplier-delegated authentication (your users don't need Arca accounts)
- You are responsible for age verification and compliance in your jurisdiction
4.4 Data Responsibilities
- Raw entropy source data is stored on Arca infrastructure
- You may access aggregated statistics for your users
- You may not export raw timing and motion data
- User deletion requests must be forwarded to Arca
4.5 Revenue and Rewards
- Reward distribution to contributors is your responsibility
- Arca does not pay contributors directly
- Revenue sharing terms (if any) are governed by separate commercial agreements
5. Consumer Terms
If you purchase entropy from Arca:
5.1 What You Get
- Verified random bits derived from human entropy sources
- Cryptographic proofs of entropy provenance
- Merkle tree inclusion proofs
- Hedera Consensus Service anchoring for timestamps
5.2 What You Don't Get
- Contributor identities
- Raw timing or motion data
- Session or packet identifiers
- Any data that could fingerprint or identify individuals
5.3 Usage Rights
- Use purchased entropy for any lawful purpose
- Entropy is non-exclusive (same pool serves multiple consumers)
- No guarantee of specific throughput or availability
- Rate limits may apply based on your service tier
5.4 No Reverse Engineering
- Do not attempt to de-anonymize entropy sources
- Do not attempt to correlate entropy batches to individuals
- Do not use entropy data to build user profiles
6. Contributor Terms
If you generate entropy through an Arca-integrated application:
6.1 Your Relationship
- Your primary relationship is with the Supplier (e.g., Gambino), not Arca
- The Supplier's terms govern your participation and rewards
- Arca processes your contributions as infrastructure
6.2 What We Collect
- Interaction timestamps and timing patterns
- Device motion data (if permitted by Supplier's app)
- Session metadata
- Quality metrics for entropy verification
6.3 What We Protect
- Raw timing and motion data is never shared with Consumers
- Your identity is never linked to entropy output
- Anonymization is architectural, not just policy
6.4 Your Rights
- Request access to your contribution history (via Supplier)
- Request deletion of your data
- Export your account (device keys) for portability
- Opt out of future collection
6.5 Direct Participation (Mobile)
If you use Arca directly (not through a Supplier):
- Device-bound anonymous accounts by default
- Optional email linking for cross-device sync
- Protocol emissions based on contribution quality
- No employer relationship exists
7. Privacy Guarantees
| Data Type | Visibility |
|---|---|
| Raw timing and motion data | Arca only (never shared) |
| Contributor identity | Contributor + Supplier + Arca |
| Session/packet IDs | Arca only |
| Verified bits count | Contributor + Consumers |
| Batch statistics | Public |
| Entropy output | Consumers |
| Merkle proofs | Public |
Key guarantee: There is no technical path from entropy output back to contributor identity.
8. Acceptable Use
Do not use Arca services to:
- Submit fraudulent, synthetic, or bot-generated entropy
- Attempt to manipulate entropy quality scores
- Reverse engineer anonymization systems
- Violate any applicable laws
- Interfere with service operation
- Resell access without authorization
Violation may result in immediate termination and forfeiture of any pending rewards.
9. Service Availability
Arca is infrastructure. Like any infrastructure:
- We aim for high availability but don't guarantee it
- Maintenance windows may occur
- Network conditions affect performance
- We reserve the right to modify, suspend, or discontinue services
No SLA is provided unless covered by separate commercial agreement.
10. Disclaimers
AS-IS SERVICE: Arca services are provided "as is" without warranties of any kind, express or implied.
NO GUARANTEES: We do not guarantee:
- Continuous, uninterrupted service
- Specific entropy throughput
- Reward amounts or token values (if applicable)
- Compatibility with all systems
NOT FINANCIAL ADVICE: Arca does not provide investment, legal, or tax advice. Any tokens or rewards distributed through Arca-integrated applications are governed by those applications' terms.
11. Liability Limits
To the maximum extent permitted by law:
- Arca's total liability is limited to $100 or fees paid in the last 12 months, whichever is greater
- Arca is not liable for indirect, incidental, or consequential damages
- Arca is not liable for Supplier or Consumer actions
- Arca is not liable for blockchain network issues, token value fluctuations, or regulatory changes
12. Indemnification
You agree to indemnify Arca against claims arising from:
- Your violation of these terms
- Your violation of applicable laws
- Your use of Arca services
- Disputes between you and third parties
13. Term and Termination
Suppliers and Consumers
- Commercial terms govern duration
- Either party may terminate with 30 days notice
- Arca may terminate immediately for material breach
Contributors
- Your participation is voluntary
- You may stop contributing at any time
- Account deletion available upon request
- Some data may be retained for legal compliance
14. Changes to Terms
We may update these terms as the protocol evolves. Material changes will be announced:
- On our website
- Via email (for registered Suppliers/Consumers)
- Through Supplier notifications (for Contributors)
Continued use after changes constitutes acceptance.
15. Governing Law
These terms are governed by the laws of Delaware, USA. Disputes will be resolved through binding arbitration under AAA rules, except where prohibited by law.
16. Miscellaneous
- Severability: Invalid provisions don't affect the rest
- No Waiver: Not enforcing a right doesn't waive it
- Assignment: We may assign these terms; you may not without consent
- Entire Agreement: These terms (plus any commercial agreements) are the complete agreement
17. Contact
Questions about Arca infrastructure services:
Email: legal@arca.io
Summary
| If you are... | Your primary terms are... | Arca provides... |
|---|---|---|
| Contributor | Supplier's TOS (e.g., Gambino) | Infrastructure that processes your entropy |
| Supplier | These terms + commercial agreement | SDK, API, verification, storage |
| Consumer | These terms + commercial agreement | Verified, anonymized entropy |
Arca is plumbing. We move entropy from humans to applications. We don't see who you are, and neither do the applications using our entropy.