Terms of Service · Waldrop

The short version

Waldrop is a frontend for storing files on Walrus, a decentralized storage network on the Sui blockchain. You bring a wallet, pay a subscription in USDC, and we route your files to Walrus.

We can't reverse blockchain transactions, recover lost wallets, or un-delete blobs. The service is provided as-is. If that's OK with you, read on for the details.

About these terms

By using app.waldrop.xyz or any other Waldrop-operated interface, you agree to these terms. If you don't agree, please don't use the service.

We may update these terms — material changes are flagged with an updated "Last updated" date and (for changes that materially affect your rights) a notice in the dapp the next time you sign in. Continuing to use Waldrop after a change means you accept the new terms.

What Waldrop does

Lets you connect a Sui wallet and identify yourself with an off-chain signature.
Lets you import files from your computer or from connected cloud sources (Google Drive, Dropbox, Amazon S3, Google Cloud Storage, Azure Blob Storage, SFTP).
Pushes those files to Walrus storage and records their metadata on the Sui blockchain.
Optionally encrypts files with SEAL (threshold encryption across two independent key servers) so only your wallet — and wallets you share with — can read the contents.
Sells monthly subscriptions in USDC that unlock larger storage quotas and higher upload limits.

What Waldrop is not

Not a custodian. We don't hold your wallet keys, your USDC, your SUI, or your files. Everything is in your own wallet or on permissionless networks (Walrus / Sui).
Not a bank or money transmitter. Subscriptions are peer-to-peer transactions on Sui. We don't process credit cards or hold fiat balances.
Not the chain. Walrus and Sui are independent networks. If they go down, your bytes are still encoded on storage nodes but Waldrop can't serve them until the chain comes back.

Eligibility

You must be at least 13 years old (16 in the EU) to use Waldrop, and legally able to enter into a binding agreement under the laws that apply to you. You're responsible for ensuring that your use of Waldrop is legal in your jurisdiction.

Your wallet and your responsibility

You alone control your keys. Whoever holds your wallet's seed phrase controls every blob, every subscription, every USDC token. Treat it like cash.
We can't recover access. Lose your seed phrase and the dapp can't help. Walrus blobs registered to a lost wallet are effectively unreachable to you — although their bytes remain on the network and are content-addressed (anyone with the blob ID can still read them).
Blockchain transactions are final. Once a transaction is signed and confirmed on Sui, it cannot be reversed by Waldrop, by you, or by anyone. Double-check details before you sign.

Acceptable use

You agree not to use Waldrop to:

Upload, store, or distribute content that infringes copyright, trademark, or other intellectual property rights.
Upload content that is illegal in your jurisdiction (CSAM, malware, stolen data, or content prohibited by sanctions / export controls).
Interfere with the service — scraping, denial-of-service, attempting to bypass storage quotas, abusing publishers, etc.
Misrepresent yourself or impersonate someone else's wallet.
Use the service in any way that violates Walrus's, Sui's, or our connected providers' (Google, Dropbox, AWS, etc.) own terms.

We can refuse to serve any wallet that violates these rules. We can also report illegal content to the relevant authorities. We can't remove content from Walrus on your behalf — that's the user's own wallet action — but we can refuse to facilitate new uploads.

Subscriptions and payments

How you pay. Subscriptions are paid in USDC via a Sui transaction. Your wallet signs, USDC moves to the Waldrop treasury contract, a Subscription Sui object lands in your wallet.
No auto-renewal. Subscriptions expire after the billing period unless you explicitly click Renew. No recurring charges happen without your signature.
No refunds. Once a subscription transaction lands on-chain, payment is final. If you upgrade or downgrade, pro-rata math applies (you only pay the price difference for remaining epochs).
Pricing changes. Plan prices and limits are stored on-chain in the PlanRegistry. We may update them via an admin transaction. Changes apply to new subscriptions and renewals — they don't retroactively change your active subscription.
What happens after expiry. Cancelled / expired subscriptions drop you back to the Free tier's limits. Existing blobs stay readable until their own epoch expiry. You can renew at any time to restore the higher tier.

Storage — Walrus caveats

Walrus is permissionless. Anyone running a storage node can host slivers of your blobs. We don't pick the nodes — the protocol does.
Public by default. Walrus blobs are content-addressed and globally fetchable by blob ID. To make a blob private, enable SEAL encryption (available on Starter and above).
Epoch expiry is real. Walrus blobs expire after the epoch count you set. After expiry, storage nodes are free to discard the slivers. Extend before expiry if you want to keep them.
Deletion is final. If you delete a deletable blob, the slivers are released across the network in seconds. There is no undelete.

Encryption — SEAL caveats

SEAL splits your encryption key across two independent key servers (Mysten Labs and Waldrop). Both must respond to decrypt. Neither alone can read your file.
If either key server is compromised, an attacker gets at most half the key — useless without the other half.
If both key servers are compromised at the same time, encrypted blobs could be decrypted. We mitigate this with operational independence (different infra, different operators), but it's a real risk to be aware of for highly sensitive data.
Filename, size, owner, and viewer list are recorded on-chain in plaintext even for encrypted blobs. Pick filenames carefully.

Third-party services

Waldrop depends on services we don't control:

Sui network — for all on-chain state. If Sui has downtime, the dapp can't read or write on-chain data.
Walrus storage nodes — for actual storage. Outages affect new uploads and (rarely) reads.
SEAL key servers — for encryption / decryption of private blobs. If either is unreachable, decryption fails.
Google, Dropbox, AWS, etc. — for any cloud connector you enable. Subject to their own terms and uptime.

We don't warrant the uptime or correctness of these services. Waldrop's job is to wire them together cleanly — when one of them misbehaves, our best-effort is to surface a clear error.

Disclaimers

Waldrop is provided "as is" and "as available", with no warranties of any kind, express or implied — including merchantability, fitness for a particular purpose, non-infringement, or uninterrupted operation.

We don't guarantee that:

The service will be available 100% of the time.
Bugs will be fixed within any particular timeframe.
Stored blobs will be retrievable indefinitely beyond their paid epochs.
Walrus, Sui, or any third party will continue to operate.
Encryption will remain secure against future cryptographic advances.

Limitation of liability

To the maximum extent permitted by applicable law, Waldrop, its operators, and its contributors will not be liable for any indirect, incidental, special, consequential, or punitive damages — including lost profits, lost data, lost goodwill, or any other intangible loss — arising out of or related to your use of the service.

For any direct damages, the total liability is limited to the amount of subscription fees you've paid to Waldrop in the 12 months preceding the claim, or USD 50, whichever is greater.

Some jurisdictions don't allow some of these limitations. In those places, the limitations apply only to the maximum extent allowed.

Indemnification

You agree to indemnify and hold Waldrop, its operators, and its contributors harmless from any claim or demand — including reasonable legal fees — arising out of your use of the service, your violation of these terms, or your violation of any third party's rights.

Termination

You can stop using Waldrop at any time. Cancel any active subscription from the Plans page; revoke any connected OAuth provider from their own settings; disconnect your wallet.

We can suspend or terminate your access to the dapp if you materially violate these terms (illegal content, abuse, fraud). We can't revoke ownership of blobs that are already on-chain in your wallet — we can only refuse to facilitate new operations.

Open source

Waldrop's smart contracts are Apache 2.0 licensed; the TypeScript SDK is MIT. The dapp frontend source is available for inspection on GitHub. Nothing in these terms restricts your rights under those open-source licenses.

Governing law and disputes

These terms are governed by the applicable law of your jurisdiction and ours. Any dispute that can't be resolved informally should first be raised by email to support@waldrop.xyz. We'll work in good faith to resolve it before either party escalates.

Severability

If any part of these terms is found unenforceable, the rest remain in effect.

Contact

Questions about these terms? support@waldrop.xyz. We respond within ~7 days.