WolOS Hub
Sign in

Terms of Use

Version 1, effective 2026-11-04.

1. Who we are and what this page is

1.1. WolOS Hub (the "hub") is run by Júlia Klee (Kleedolinux), who runs WolOS.org from São Paulo, Brazil. Contact: [email protected].

1.2. These Terms of Use are the agreement between you and us for using the hub at hub.wolos.org. You accept them when you sign in for the first time, by pressing the accept button next to the text. If you only read public pages without signing in, these terms still apply to that use, as far as the law allows.

1.3. The hub is free. We do not sell anything on it, we show no advertising, and we sell no data.

1.4. All rights reserved. The hub's name, design, texts, index, signatures, public log and revocation list are ours, except what belongs to publishers and other people. These texts give you only the rights they state in words. Every other right stays with us. The hub's source code is free software (section 13.2).

2. Definitions

These words mean the same thing in every text listed in section 2.2.

2.1. Words used:

  • "Hub": the service at hub.wolos.org: its pages, its programming interface, its sign-in, its admin panel, and the files it publishes (the signed index, the revocation list and the public log).
  • "We", "us", "our": Júlia Klee, the operator of the hub, and the moderators and reviewers she appoints to help run it. For the law, Júlia Klee is the provider of the hub and the controller of your personal data.
  • "You": the person using the hub. When you act for an organisation, "you" also means that organisation.
  • "Account": your GitHub account, as you use it to sign in to the hub.
  • "Organisation": a GitHub organisation that one of its owners linked to the hub.
  • "Publisher": an account or organisation that lists Work on the hub.
  • "Work": an app, plugin or extension listed on the hub, every version of it, and its listing text, icon and screenshots.
  • "Listing": the hub's page and index entry for one Work.
  • "Hub distribution licence": the free, personal, non-transferable licence, revocable at our sole discretion, that we grant a publisher to distribute a Work through the hub (Publisher Agreement, section 2.4). It is never a licence to or over the publisher's code.
  • "Release": one version of a Work, published as a GitHub release of the Work's repository.
  • "Content": anything you send to the hub: listing text, release notes, reports, answers, requests, and the metadata of your releases.
  • "Check" and "checked": the hub's automatic checks of a Release, as described in the Trust Terms.
  • "Certificate": a WolOS author certificate, at the Origin level or the Trusted level, as described in the Certificate Terms.
  • "Revocation list": the signed public list of revoked Certificates and withdrawn Releases.
  • "Public log": the public record of every index, check result, Certificate, revocation and moderation decision. It never names a person who reported something.
  • "Doctrine": the Wonderland Doctrine, the code of conduct of WolOS, at wolos.org/doctrine.
  • "Consumer": a person who uses the hub for purposes outside their trade, business or profession.
  • "WolOS repositories": the source repositories of the WolOS project on GitHub.

2.2. The texts (all at hub.wolos.org):

2.3. If two texts disagree: the Privacy Policy wins on personal data; the Contributor Licence Agreement wins on licences for contributions to WolOS repositories; the Publisher Agreement and the Certificate Terms win on publishing and Certificates; these Terms of Use win on everything else.

3. Who may use the hub

3.1. You must be at least 16 years old to sign in. If you are under 16, do not sign in. If we learn that an account belongs to someone under 16, we close its hub account and delete its data, as described in the Privacy Policy.

3.2. You may not use the hub if the law that applies to you forbids it, or if we closed your access before and did not reopen it.

3.3. You may use the hub for an organisation only if you are allowed to act for it.

3.4. By signing in, you confirm that you are 16 or older, that you may accept these texts, and that section 21.9 (export control and sanctions) does not stop you from using the hub.

4. Your account

4.1. You sign in with GitHub. We never see or keep your GitHub password. GitHub's own terms apply to your GitHub account.

4.2. One person, their own account. You may not share it, sell it, or make extra accounts to get around a limit or a decision.

4.3. Keep your GitHub account in your own hands: turn on two-factor sign-in and keep your recovery codes. Publishing and Certificates need two-factor sign-in.

4.4. What happens with your account is your responsibility, unless someone took it without your fault and you told us as soon as you knew.

4.5. Tell us at once if you think someone else controls your account: [email protected].

5. What the hub does

5.1. The hub lists Work made by publishers. People download its files from the publisher's GitHub release, or from a copy the hub keeps and delivers through its network, and WolOS compares each file with the hash in the hub's signed index.

5.2. The hub checks each Release with automatic checks before it lists it, publishes the result, signs the index, keeps the public log and the revocation list, and issues Certificates at two levels:

  • Origin: given automatically when the rules in the Certificate Terms are met. It states who published a file and from which repository.
  • Trusted: given by people, after review, to organisations and people whose public work our reviewers can name. Each Trusted Release is read by a reviewer before it is listed.

5.3. At our sole discretion, and at any time, we may change, pause, limit or stop any feature, or the whole hub, with or without notice, where the law allows. If we stop the hub for good, we announce it at least 30 days before, unless the law, a serious reason or an urgent risk to people forces us to act faster. The public log and the revocation list stay available as long as we can keep them.

5.4. We have no duty to list, publish, show, check, review, monitor, store, back up or keep anything, except where a law requires it or where these texts make a specific promise. We do not watch everything people send. Where the law says so, we have no general obligation to monitor (EU Digital Services Act, article 8).

5.5. Third-party content belongs to the person who sent it. Every Work, Listing, Release and piece of Content that someone else publishes is that person's alone: their responsibility, their liability, their promise. We do not make it, sell it, endorse it or adopt it. This stays true when we check it, label it, sign its hash, show it in search or leave it up after a report.

5.6. Our role. For the law, the hub is an intermediary: a hosting service that stores, shows and delivers what users send, and an information location tool that links to files on GitHub. We rely on every liability exemption the law gives intermediaries, including articles 4 to 8 of the EU Digital Services Act, articles 18 and 19 of Brazil's Marco Civil da Internet, 47 U.S.C. section 230 and 17 U.S.C. section 512. Our own checks, reviews and moderation are voluntary and done in good faith; they do not make us the author of anyone's content and do not take those exemptions away (Digital Services Act, article 7).

5.7. Distribution and Certificates are licences. Distribution through the hub is the hub distribution licence that we grant each publisher. A Certificate is a licence that we grant its holder to use the WolOS Authors certificate and its signature lines (Certificate Terms, section 1.3). Both are free, personal, not transferable, and revocable at our sole discretion, with or without notice, where the law allows. Neither is a licence to or over anyone's code: each Work stays under its own licence. We use this shape because a licence that we grant, and may revoke, rests on our own rights, so it holds in every jurisdiction, whatever local rules say about code, consumer contracts or platform liability.

6. What "checked" means, and what it does not

6.1. "Checked" means the hub ran its automatic checks on that exact file and published what they found. It means nothing more.

6.2. A check, an Origin Certificate and a Trusted Certificate are not a promise that software is harmless, free of faults, legal where you are, or fit for any purpose. A reviewer reads what a Release declares and what changed. A reviewer does not run it for you and does not understand every byte.

6.3. You decide what you install. Read what the hub shows you: the publisher, the level, the findings, the permissions asked.

6.4. The Trust Terms explain every label in detail.

6.5. Checked never means harmless. No label, check, Certificate, review, rank, badge or word from us or our moderators is a promise that software is free of risk. Do not rely on a label instead of your own judgement.

7. Using the hub well

7.1. The Doctrine applies everywhere on the hub: listings, release notes, reports, answers, profile text, and anything you say to our moderators.

7.2. You may not:

  1. Publish or link malware, spyware, stalkerware, or anything that takes data, money, files, accounts or computing power without the person's clear permission.
  2. Hide what Work does, or make it do something its listing does not say.
  3. Publish content that is illegal where you are, in Brazil, or where the hub is offered, or that infringes someone else's rights.
  4. Pretend to be someone else, or make a Work look like it comes from WolOS or another publisher when it does not. The Trade Mark Policy and the name rules in the Hub Policies apply.
  5. Get around a limit, a waiting time, a check, a decision or a ban, including with other accounts.
  6. Attack, overload, probe or scan the hub, or try to enter the admin panel, outside the Disclosure Policy.
  7. Collect other people's data from the hub in bulk, except the public index, revocation list and public log, which anyone may copy.
  8. Send false or bad-faith reports, or use reports against someone you disagree with.
  9. Publish someone's private information without their permission.
  10. Sell, rent or transfer an account, a listing, a namespace or a Certificate.

7.3. The Hub Policies give the full list, with examples.

8. Your content and your work

8.1. You keep every right you have in your Content and your Work.

8.2. You give us a worldwide, free, non-exclusive licence to store, copy, show, translate, adapt for display, and publish your Content, and to sign and publish hashes and metadata of your Releases, as far as needed to run, show, check, moderate and keep a record of the hub. This licence lasts as long as your Content is on the hub, and for the public log and the revocation list, for as long as they exist, because they are how people check what they installed.

8.3. The licence in 8.2 gives us no right over your code. It does not let us sell your Work or change its licence. Your Work's own licence decides what everyone, including us, may do with the Work itself. The Contributor Licence Agreement covers what you send to WolOS repositories.

8.4. You promise that you have the rights needed for your Content, and that publishing it does not break the law or anyone's rights.

8.5. Ideas and feedback. If you send us ideas, suggestions or feedback about the hub or WolOS, we may use them freely, without paying you and without any duty to you. This does not cover code or content you send to a WolOS repository, which the Contributor Licence Agreement covers.

9. Moderation and automatic decisions

9.1. We moderate the hub with:

  • Automatic checks on every Release, which may pass, flag or block it.
  • Automatic rules at sign-in, publishing and Certificate requests: two-factor sign-in, account age, rate limits, name rules, waiting times.
  • People: moderators and reviewers who read reports, review Trusted Releases, and decide on appeals.

9.2. An automatic block or refusal can always be looked at again by a person if you ask (section 11). No decision to close an account or revoke a Certificate for cause is made by a machine alone.

9.3. The Hub Policies describe the rules, the waiting times and our response times.

10. What we may do

10.1. At our sole discretion, at any time, with or without cause, and with or without notice, where the law allows, we may:

  • list or refuse to list, delist, flag, hide, delay, demote or remove a Listing or a Release;
  • withdraw a Release from the index and add it to the revocation list;
  • revoke, downgrade, suspend, refuse or refuse to renew a Certificate;
  • remove, edit or label Content;
  • reclaim or rename an id or a namespace;
  • limit, suspend or close your account's access to the hub;
  • change, pause or end the hub or any part of it (section 5.3).

10.2. Our usual grounds are these texts, the Doctrine, the law, a court or authority order, a valid notice, a risk to people or to WolOS machines, a repository that changed hands, and keys or accounts that may no longer be only yours.

10.3. We act in a fair and proportionate way. We consider the rights of everyone involved, including freedom of expression. Where a law requires a ground and diligence before we restrict content or an account (for people in the EU, Digital Services Act, articles 14(4) and 17; in Brazil, Marco Civil da Internet, article 20, and the Código de Defesa do Consumidor), we act only on such a ground, and section 10.4 applies in full.

10.4. When we restrict your Content or your account, we tell you, by GitHub or by the email you gave us, what we did, why, which rule or law, whether a machine or a person decided, whether it came from a notice, and how to ask us to look again. We do not tell you this only when the law forbids it, or when it would help someone hurt people or WolOS machines; then we tell you as soon as that reason ends.

10.5. Most problems end with a private word. Serious cases, such as malware, threats or stolen keys, end at once.

10.6. Acting on suspicion. We may act on a reasonable suspicion. We do not need proof, a court decision or a complaint first. If the suspicion turns out wrong, we undo what we can (section 11.2).

10.7. Cooperation with authorities. We cooperate with courts, police and other authorities. We may keep and give them information, including about your account, when we believe in good faith that the law requires it, that a valid order asks for it, or that it is needed to protect someone's life or physical integrity, to report a suspected crime, or to defend the hub, WolOS or other people's rights. The Privacy Policy, section 6.5, says how. We tell you, unless the law, the order or the risk forbids it.

10.8. Using one of these rights is never a breach of these texts, and does not make us liable to you, as far as the law allows (section 15).

11. Asking us to look again

11.1. If we restricted your Content, your Listing, your Certificate or your account, or did not act on your report, you can ask a person to look again, free, within 6 months of our message: answer that message, or write to [email protected] with the link and your reasons.

11.2. Someone who did not take the first decision looks at it, when we have such a person. We answer within 14 days. If we were wrong, we undo it.

11.3. You keep every other right: to go to court, or, in the EU, to use a certified out-of-court dispute settlement body under the Digital Services Act.

12. Notices of illegal content and copyright

12.1. Anyone can tell us about content on the hub they think is illegal or infringes their rights. The Notices and Takedown page explains how, under the US Digital Millennium Copyright Act, Brazil's Marco Civil da Internet and the EU Digital Services Act.

12.2. We close the hub accounts of people who infringe others' rights again and again, as that page explains.

13. Our names and our code

13.1. WolOS, Cryswol, rsh, WolOS Hub and their logos are our marks. The Trade Mark Policy says how you may use them.

13.2. The hub's source code is free software under the GNU General Public License, version 2 or any later version. These terms do not limit what that licence lets you do with the code.

14. Disclaimers

14.1. To the extent the law allows, the hub, the checks, the labels, the Certificates, the index, the revocation list, the public log and everything else we give are provided "as is" and "as available", with all faults and without warranty of any kind, express, implied or legal, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, quiet enjoyment, and of results.

14.2. We do not make, sell or supply the Work listed on the hub. Each publisher is responsible for its Work. Any warranty for a Work comes only from its publisher and its licence.

14.3. We do not promise that the hub is always available, on time, without interruption or free of errors, that it keeps your data, that a check finds every problem, or that a revocation reaches every machine in time.

14.4. Nothing we, our moderators or our reviewers say, write or show, including a label, a check result or an answer to a question, creates a warranty or a duty that these texts do not state.

14.5. Nothing in this section removes a right that the law gives you and that cannot be removed by contract.

15. Limitation of liability

15.1. To the extent the law allows, we are not liable for any indirect, incidental, special, exemplary, punitive or consequential loss, or for lost data, profits, revenue, goodwill or opportunities, even if we were told they were possible.

15.2. To the extent the law allows, we are not liable for loss caused by:

  • a Work, a publisher, another user, or any other third-party content;
  • a decision to list or not list, flag, hold, hide, delist, withdraw, revoke, downgrade, suspend or close, or to act or not act on a report, a notice or a suspicion;
  • a pause, change, error or end of the hub or of any feature;
  • access to your account or data by someone else, unless our own fault caused it;
  • an event under section 21.8 (events beyond our control).

15.3. To the extent the law allows, our total liability to you for everything related to the hub, together, is limited to the lowest amount that the law that applies allows, and never more than 100 US dollars. The hub is free; this cap reflects that.

15.4. Nothing in these texts limits or excludes liability for:

  • intent or gross negligence;
  • death or personal injury caused by negligence;
  • fraud;
  • anything else that the law where you live does not allow to be limited or excluded.

15.5. Consumers in Brazil: sections 14, 15 and 16 do not reduce the rights of the Código de Defesa do Consumidor (Lei 8.078/1990), including its articles 25 and 51. Where that code applies, a limit in these texts applies only as far as article 51, I, allows.

15.6. Consumers in the EU and the EEA: sections 14, 15 and 16 do not reduce the rights that the mandatory law of your country gives you, including the Unfair Contract Terms Directive (93/13/EEC) as your country applies it.

15.7. Residents of US states: some states do not allow the exclusion of implied warranties or the limitation of some damages; in those states, those parts apply only as far as the state allows.

16. Your responsibility to us

16.1. You defend us, and pay for it. If anyone brings a claim, demand, investigation or case against us, or against our moderators or reviewers, that comes from your Work, your software, your Content, your data, your conduct on or off the hub, or your breach of these texts or the law, you:

  • defend us, at your cost, with lawyers we accept;
  • pay our reasonable costs, losses, damages, fines where the law allows them to be passed on, settlements and legal fees from it.

16.2. We tell you about the claim promptly. We may take over the defence ourselves at any time; you then cooperate and keep paying the reasonable costs. You may not settle a claim in our name, or admit anything for us, without our written consent.

16.3. Consumers: in Brazil and in the EU and the EEA, and anywhere the law where you live requires it, this section applies only to loss you caused by your fault, and only as far as that law allows.

17. Ending

17.1. You can stop using the hub at any time, and ask us to delete your hub account (Privacy Policy, section 9).

17.2. We can end or suspend your access at any time under section 10.

17.3. When access ends, the public log, the revocation list and records we must keep for the law stay, as the Privacy Policy explains.

17.4. Survival. Every section that by its nature should outlast the end continues after it, including sections 1.4, 5.4 to 5.6, 6, 8.2 (for the public log and revocation list), 8.4, 8.5, 10.6 to 10.8, 13, 14, 15, 16, 17.3, 17.4, 18 and 21.

18. Law and courts

18.1. These terms are governed by the laws of Brazil. Disputes go to the courts of the city of São Paulo, State of São Paulo, Brazil.

18.2. This section does not take away the protections you have where you live:

  • Consumers in Brazil may bring claims in the courts of their own domicile (Código de Defesa do Consumidor, article 101, I).
  • Consumers in the EU and the EEA keep the protection of the mandatory law of the country where they live, and may bring claims in the courts of that country.
  • Residents of a US state keep the protection of the consumer laws of their state that cannot be waived, and may bring claims in their state where those laws give them that right.

18.3. There is no forced arbitration in these texts.

18.4. Individual claims only, where enforceable. To the extent the law allows, you and we bring claims against each other only individually, and not as a plaintiff or a member of a class, collective or representative action. This section does not apply:

  • to consumers in Brazil, and never limits collective actions under the Código de Defesa do Consumidor (articles 81 to 104) or Lei 7.347/1985;
  • to consumers in the EU and the EEA, and never limits representative actions under Directive (EU) 2020/1828;
  • where a law that applies to you makes such a waiver void, for example the California Consumers Legal Remedies Act (Civil Code section 1751);
  • to actions brought by a public authority, a public prosecutor or an entity that a law allows to act for consumers.

If a court finds this section unenforceable for a claim, it does not apply to that claim, and the rest of these texts stays in force.

18.5. Before going to court, please write to [email protected]. Most problems are solved faster that way. This is a request, not a condition.

19. Changes to these texts

19.1. We change a text only by publishing a new version with a new number and date. The Changes Log lists every version and what changed.

19.2. For a change that matters to you, we tell you at least 30 days before it takes effect, on the hub and by GitHub notification or email when we have one. A change required by law, or needed at once to protect people, may take effect sooner; we tell you as soon as we can.

19.3. If you do not agree with a new version, stop using the hub and ask us to delete your hub account. The hub asks you to accept the new version before your next action that needs it.

20. Contact

20.1. Designated contact for everything, including legal notices, questions and disputes: [email protected]. Conduct under the Doctrine: [email protected]. Weaknesses in the hub or in WolOS: see the Disclosure Policy.

20.2. Single point of contact for people using the hub and for authorities, including EU Member State authorities, the European Commission and the European Board for Digital Services: [email protected]. You may write in English or Portuguese. A person answers; we do not answer only with machines.

20.3. Legal representative in the EU (Digital Services Act, article 13; GDPR, article 27): to be appointed; until then contact the controller directly at [email protected].

20.4. Address: São Paulo, Brazil, full address on request. We send it to anyone with a legal reason to need it.

20.5. Notices to us under these texts count only when sent by email to [email protected], or by the means a law or a court order requires. Notices to you count when we send them to the email address you gave us, by GitHub notification, or, for notices to everyone, on the hub. You agree to receive notices and agreements electronically.

21. General

21.1. Severability. If a court or authority finds part of these texts invalid or unenforceable, the rest stays in force, and that part applies as far as the law allows, or is replaced by the valid rule closest to it.

21.2. No waiver. If we do not enforce a rule at once, or allow something once, we do not give up the rule or our right to enforce it later. A waiver counts only in writing from us.

21.3. Assignment. You may not transfer your rights or duties under these texts without our written permission. We may transfer ours, in whole or in part, without your consent, to a person or organisation that takes over the hub or WolOS, including a legal entity that runs the WolOS project. If you are a consumer, a transfer never reduces your rights, and we tell you about it.

21.4. Entire agreement. These texts are the whole agreement between you and us about the hub. They replace anything said or written before about the same subject. This does not limit liability for fraud.

21.5. Language. The English text is the original. If a translation differs, the English text applies, unless the law where you live says the translation must apply.

21.6. No partnership. These texts make no partnership, employment, agency or joint venture between you and us. You may not act or speak for us.

21.7. No third-party rights. Nobody but you and us can enforce these texts, except our moderators and reviewers for sections 15 and 16, and except where a law gives others rights that cannot be excluded.

21.8. Events beyond our control. We are not responsible for a delay or failure caused by events beyond our reasonable control, such as natural events, epidemics, war, attacks on networks, failures of power, of the internet or of our providers (including GitHub and Cloudflare), strikes, or acts of authorities. Our duties pause while the event lasts.

21.9. Export control and sanctions. You follow every export control and sanctions law that applies to you and to what you send, download or publish, including those of Brazil, the United States (such as the Export Administration Regulations and the rules of the Office of Foreign Assets Control), the European Union (such as Regulation (EU) 2021/821) and the United Nations. You may not use the hub if you are a person those laws forbid us to deal with, or from a place where they forbid it. We may block access or Releases to follow those laws.

21.10. Interpretation. "Including" means "including, without limit". Headings and "In short" boxes help you read; they do not change the sections.

Download as text

sha256a3322489c509f98d72565662b9cfb45f1afeaa7a1fe52c8c8e42975fad7c6315

The fingerprint of this exact text. When you accept it, the hub records this fingerprint with the version and the time.