Terms of service (pilot)

Pilot version. This is the short form of the terms in docs/legal/pilot-terms.md, which a lawyer reviews before publication. Plain language on purpose. Nothing here takes away rights you have under the Australian Consumer Law.

Plain summary

You pay for days of access with a voucher. For every paid day you may connect up to five devices to our WireGuard servers. We do not know who you are and cannot recover your account number. You may ask for a refund within 14 days of redeeming a voucher. This is a pilot of a service that is configured not to log and has not yet been audited. It will not be switched off at the end of the pilot: your paid time carries into every later version.

Who may use the service

You must be 18 or older. The service must not be used to get around any age-assurance measure or the minimum age for social media accounts in Australia, and we do not offer it for that purpose. You must follow the acceptable use policy, which is part of these terms.

What you get

Access to the ironkeel WireGuard servers for every day your account is paid for, on up to five devices at once, using standard WireGuard configuration files in the official WireGuard app or any compatible client. Access ends at the end of your paid-until date and resumes within about a minute of redeeming another voucher. Your private key is made on your device or in your browser and never sent to us; keeping it and your account number safe is your job.

Every server blocks outbound port 25 and traffic between users, and there is no port forwarding. These are design decisions and will not change.

What you do not get

We do not promise that any particular website, app, bank, government service or streaming service works through the VPN; platforms may detect and refuse VPN connections. We have no server in Australia, by design, so services that need an Australian IP address may not work while connected: disconnect to use them. Leak protection is whatever your operating system and the WireGuard app provide; our guides describe each platform's settings and their limits, including that iOS and macOS have no full kill switch. During the pilot we promise no level of availability. Servers may be rebuilt, moved or withdrawn; a rebuilt server has a new key and you must download fresh configuration files for it. We give notice on the servers page and status page where we can.

Accounts

Your 16-digit account number is the only credential. We store only a one-way hash of it and cannot recover it. If you lose it, the account and its remaining days are lost, except that within 14 days of redeeming a voucher, if you present the original voucher code and the payment reference (for a cash order, the order code is both), we will issue a replacement voucher for the same number of days. You may delete your account at any time; deleting it ends your access and removes your devices at once, and the rest of the record is removed after about 21 days (an off-site backup copy up to a week later), as the privacy statement sets out. Remaining days are not refunded except within the refund window below. Do not sell, lend or share your account.

Vouchers and price

Vouchers are sold for one month (30 days) and three months (90 days) at A$8 per month including GST, the same rate for every duration. A voucher is valid for at least three years from the day it is sold to you, and the last day it works is shown on it (a code from the order page works for at least three years from the day we record its cash); an unredeemed voucher can be refunded at any time before it expires. Once redeemed, its days are added to the account that redeemed it and it cannot be transferred. To pay with cash, get an order code on the order page and post the cash with a slip showing only that code. The code is shown once, is the only way to claim the time, and cannot be recovered. Once we record the cash it works as a voucher. An order waits 90 days for its cash; cash that arrives later is still honoured. Cash in the post is at your risk. Nothing renews automatically during the pilot and we store no payment method. The first 500 people who pay keep the price they first paid for as long as their account stays continuously paid, for up to 24 months; this is not a lifetime offer and we sell no lifetime plans. Prices are the same for every payment method, with no surcharge for any method. We do not accept payment for service we cannot deliver now.

Refunds

Ask within 14 days of redeeming a voucher, through the support form, quoting the voucher code. We refund through the channel you paid with: bank transfer or PayID to the account you paid from, and for cash a credit of equal days to a new voucher. After 14 days the link between the voucher and your account has been erased and we cannot identify which account to refund. These rules are in addition to your rights under the Australian Consumer Law: if the service has a major failure you are entitled to a refund of the unused part of what you paid, whatever the date, and we will need the voucher code or payment reference to pay it.

Logs, legal requests and compulsion

The service is configured not to log and has not yet been independently audited. What we store is set out in the privacy statement. We respond to lawful requests with what we hold, and cannot produce identities, past IP addresses or activity, because they do not exist.

Australian law can compel us to identify the current IP address of a named account while it is connected, using capability we already have. We minimise this by never linking keys to accounts for longer than needed, by clearing idle peers from server memory, and by offering payment methods that do not identify you. Blind-signed access tokens, which remove the account-to-key link entirely, are a committed roadmap item.

We publish a transparency report at least every six months, limited to what Australian law allows us to say; some kinds of request may not be mentioned at all, including whether they exist.

Change of control and wind-down

If control of the company changes, your prepaid time will be honoured by the new owner or refunded to you, and the no-logs commitments in the privacy statement bind the new owner as a condition of the sale. If we close the service, we will give at least 60 days' notice, keep it running for that period and refund the unused part of prepaid time on request; because we cannot identify accounts without your help, you will need to ask and show the voucher code or payment reference within the notice period. Where the law allows, we disclose any seizure of our servers.

Suspension and termination

We cannot see who does what through the service and do not monitor it. Where an account is identified to us as in breach of the acceptable use policy, for example because the user identifies themselves in a support ticket or complaint, we may suspend or terminate it without refund of remaining days. We block specific internet destinations on our own DNS resolvers only where the law requires it, and each such block is published.

Liability

Our services come with guarantees that cannot be excluded under the Australian Consumer Law, and nothing here excludes, restricts or modifies them. Subject to that, the service is provided as is during the pilot, our total liability is limited to the amount you paid us in the 12 months before the event, and we are not liable for loss caused by things outside our reasonable control, including action by hosting providers, governments or courts.

Changes, complaints and law

We may change these terms with at least 14 days' notice on the website and status page; if a change reduces what you get for time already paid for, you may ask for a refund of the unused part. Raise any problem through the support form; say if you want it treated as a formal complaint and we will record it, acknowledge it within two business days and tell you the outcome within 15 business days (or tell you if it will take longer). These terms are governed by the law of Queensland, Australia, without limiting your right to bring a consumer claim where you live.

Contact

For support, use the support form. Formal complaints and legal notices may also be sent by email to vpn@ironkeel.app or by post to the PO Box shown on the website. Report misuse of the service to abuse@ironkeel.app.