The terms, in plain words.

1 Who you are dealing with#

Liir is built and operated by Siliroid LLC d/b/a Liir, an Oregon limited liability company. Writing to hello@liir.net reaches a person, not a ticket queue.

Using Liir means you accept these terms. You must be 13 or older to make a Liir. If you are under 18, you need a parent’s or guardian’s permission, and they accept these terms for you.

2 How we serve you and what you get from us#

A Liir is your account with us: claimed once, by invitation. It carries your name, your page, your address if you claim a mailbox, and a Vault that runs free on your own hardware. A Liirlit is that name written as a mark: the beads spell it, anyone may scan it, and only you can answer for it. Claiming both costs nothing, and this agreement covers you whether you ever buy anything or not.

What we sell on top of the free estate:

• Liir Cloud, from $1.99 a month or $19.99 a year: shareable space (the Shelf and your mail), a sealed Vault, your @liir.net address, and your page kept lit. Shareable space holds your files, your mail, and anything you share, and they draw on the same allowance; it is encrypted on our hardware with a key we hold, and section 8 says what that means. The Vault is separate, sealed with keys we never hold, and is never eaten into by mail. Three sizes: 2 GB with a 100 MB Vault, 25 GB with 250 MB, or 100 GB with 500 MB.
• Digital Cold Storage, paid once: 500 MB, 2.5 GB, or 10 GB placed in an offline archive. Terms are shown with each shelf.
• Liir Cold Key: a physical engraved card. It is a printed object and is never issued digitally.
• Vanity Nameplate, $4.99 paid once: a chosen public name with a mark of its own, beside your true name. Paid once means owned: a nameplate never expires, never renews, and is never held against a payment. Sold from the day the claim ceremony offers it.

Prices are in US dollars. While you stay subscribed, your rate stays the rate you signed up at, even if the list price rises later.

4 Paying and renewing#

Subscriptions renew automatically, monthly or yearly, until you cancel. Cancel any time from your account. Cancelling stops the next renewal; the service you already paid for runs to the end of that period.

Card details are handled by Stripe and never touch our servers. If a payment fails, we retry for a short while and write to you before anything changes.

You can also pay a year at a time in Bitcoin instead of by card. Bitcoin cannot pull a renewal, so nothing renews itself: we write to you before the year ends, and a new year is one payment. Details on the Bitcoin page.

5 Refunds#

• Liir Cloud: if a first subscription is not for you, write within 30 days and we refund it in full. After that, cancel any time and the service runs out its paid period. We do not prorate partial months.
• Digital Cold Storage: refundable in full during the 30-day fill window, while your shelf is still open and unsealed. Once it seals and is committed to the offline archive, it cannot be refunded. That step costs real money that cannot be undone, and we would rather say so than surprise you.
• Liir Cold Key: refundable within 30 days if the card is unused and its seal is intact. A card that has been engraved with your material cannot come back to us, for reasons the rest of this page should make obvious.

Ask at hello@liir.net. We would much rather refund you than have you dispute a charge.

6 If you stop paying#

A missed renewal starts a 3-day grace period: nothing changes for three days, so a stale card is an errand, not an emergency. After that, live services end: sync, mail, and your page.

Your Vault is then frozen: sealed, not deleted, and stays reclaimable for as long as Liir operates. Frozen has two doors: resume paying and everything simply resumes, or download the entire archive as one unit and take it home. Come back in a year or a decade, either door still opens.

You never pay merely to keep owning what is already yours.

7 How Cold Storage behaves#

You have 30 days to fill a cold shelf. Then it seals, and is committed to offline archive within 30 days. Retention runs 10 years for every cold shelf: Cold 500, Cold 2500, and Cold 10K alike. If we ever close before a term ends, we will make our best effort to mail your archive out to you.

One restore is free. Additional restores are $9.99. Restores return the whole archive, and they are honestly slow. It really is in a deep vault.

8 What you may not put here#

Two rooms, two promises. Your Vault we cannot read, so what goes in it is a promise you make rather than a filter we run. The Shelf and hosted mail we can read: Liir holds the encryption key for Shelf and hosted mail and can technically access their contents. We do not inspect them as a business model. Access is limited to operating and securing the service, responding to your request, investigating credible abuse reports, or complying with valid legal process.

In either room: do not use Liir to store or send material that is illegal where you are, to break into things that are not yours, to send mail in bulk to people who did not ask for it, or to share what you have no right to share.

If a lawful order or a credible report reaches us about a specific account, we may suspend its live services, remove or disable access to the reported item on the Shelf, and preserve what the law tells us to preserve. Sealed Vault content stays sealed, because we could not open it if we tried. Accounts that draw repeated valid copyright notices are terminated. How to report, and what a report must contain, is on the report page.

9 If Liir ever winds down#

A vault whose company vanishes overnight is not a vault. If Liir stops operating, we will give at least 90 days notice to your Liir mailbox and your account page, keep export running for that whole window, and publish the format so your archive can be opened without us.

We do not promise Liir will exist forever. We promise you will not learn it ended by finding a dead page.

10 Vanity Nameplates#

A nameplate is a chosen public name with a mark of its own, worn so your true Liir never has to be. It costs $4.99, paid once, and paid once means owned: it never expires, never renews, and is never held against a payment.

• The exact combination (the name plus its thiir, the count struck into the address) is yours alone, forever. The name itself is not exclusive: claiming potatoes-0000 does not reserve potatoes. A name is up to 16 letters, lowercase only; the thiir is ours to assign or yours to choose.
• A nameplate displays as its name alone. The thiir never shows on a plate: it lives in the address and in the beads of the mark, and it confers no rank. No two plates of the same name ever share a mark, and the mark is what tells them apart.
• Claim as many as you like: there is no limit to how many nameplates a single Liir can hold. We may slow rapid purchases to keep fraud boring; we will never cap an honest collector.
• A nameplate's mark is silver, and it scans like any Liirlit. Its heart is your heart: the same kind, the same verification, and the only thing your mask shares with your name.
• A nameplate belongs to the Liir that claimed it.
• Names that impersonate (brands, officials, support desks) or serve abuse are refused at the ceremony, and revoked without refund if they get through. In particular, a name may not put liir or thiir together with official, support, admin, staff, security, or billing. Abuse is the one case where paid-once does not mean forever.
• Once minted, a combination is withdrawn from the world permanently, so nameplate sales are final. If your Liir is ever deleted, its nameplates retire with it and are never reissued to anyone.
• A nameplate is a name, not a trademark: it grants the address and the mark, and no rights beyond them.

11 The nameplate market#

A nameplate can be sold, and only through Thiir (thiir.net), our own market: list it there at your price, and your page carries a door to the listing. The transfer happens on Thiir, in the ceremony, and a nameplate cannot change hands any other way: there is no second door. Each sale carries a 10% fee, and no transfer moves for less than $4.99: a nameplate never sells below the price of minting a new one. Selling requires the verification in section 12.

The ceremony is escrow: the buyer's money and the nameplate change hands in the same breath, or not at all. Money that moves outside the ceremony buys nothing we can see, protects nobody, and settles no dispute.

When a nameplate changes hands, its public page says so: transferred, and the date. Who sold and who bought stays private; that it moved does not. A mask's history restarts where the mark says it does. This is the one thing on a page that has no dial: it stays public at all times and cannot be set to ask, to Liir-only, or to vaulted.

A Liir itself is never for sale: a Liir binds to a person, not to a price. Handing over an account is the one transfer we do not honor and cannot protect. The vault stays recoverable by whoever held its cards, so a handed-over account can always be taken back by its old keeper, and we defend no one from that. Where heart and hands stop matching, section 12 applies: every Liir involved may be suspended together, and nameplates moved to dodge the market are revoked without refund.

12 Verification and enforcement#

We offer age verification, and it runs through an outside provider built for exactly this, xident, under its own terms and privacy policy. We keep the tier you proved and whether the check passed, never the document and never your age. Ordinary use never requires any of it: you can hold a Liir, a mailbox, a Shelf, and a Vault without anyone ever seeing your papers. xident answers one question, pass or fail, at the threshold we ask for. Liir keeps that answer, never the document. What xident holds on its own side is governed by its data terms, and we will state the retention period here in plain words once it is confirmed in writing.

If a Liir is used to disrupt, defraud, or break the law, we may suspend it and require verification before it wakes. Holding several Liirs is allowed; using them to evade a suspension, a court order, or the law is not, and every Liir involved may be suspended together.

We answer lawful orders with what we actually hold, which the privacy page lists in full. What we hold of any Vault is sealed: we can be compelled to produce ciphertext, and nothing we possess can read it. What we hold of the Shelf and hosted mail we can be compelled to produce readable, and section 8 says so.

13 The unglamorous part#

Liir is provided as it is, without warranties beyond those the law gives you and will not let us waive. To the extent the law allows, our liability for any claim is limited to what you paid us in the 12 months before it arose.

These terms are governed by Oregon law, and disputes belong to the state or federal courts sitting there.

If we change these terms, the date below changes, and material changes are sent to your Liir mailbox and your account page before they take effect.

14 The words we use#

Plain words are a promise here. When these pages use a word of ours, this is what it means.

Liir. Your account with us, and the name it answers to. Claimed once, by invitation.

Liirlit. Your name written as a mark: the beads spell it, anyone may scan it, and only you can answer for it.

Beads and blades. The parts of the mark. Beads carry the letters; blades give the mark its shape. Longer names carry more of both.

Rings and armor. How large the mark is drawn, and how much of it can be lost before the name is. Chosen once at the ceremony, worn forever.

The heart. The center of the mark. It lights when you verify, and it stays gold on every nameplate: a reminder that the mark still needs you.

Thiir. The count: four digits struck into a nameplate’s address when it is claimed. The digits stand in for that one mark wherever addresses go, in mail and in links. On sight, the mark is what tells two names apart. The word comes from vhaasi, where it means count.

Vanity Nameplate. A chosen public name with a silver mark of its own, worn beside your true name’s gold. Paid once, owned forever.

Thiir, the market. The one place a nameplate can change hands: thiir.net. There is no second door.

The Shelf. Where your files live: ordinary storage, encrypted on our hardware with a key we hold. Sharing lanes arrive with dials; everything starts private.

The Vault. The sealed room of your account. It is sealed on your device before it reaches us, and we cannot open it. Ever.

Recovery cards. Three cards minted at your ceremony, printed by you or saved as three images. Any two of them rebuild the guard that unwraps your Vault and recovers your Liir. We never hold them. They are read back by camera, or from a saved image or PDF, and never typed.

Etch and etching. To etch is to keep something for good: a letter, a file, a photo crosses into the Vault, kept word for word. The kept thing is an etching, and every etching carries its own dial: sealed for you alone, shown when someone asks, or published on your page. Everything starts sealed.

Liirpad. Our secure canvas input. A secret that must be entered by hand appears there and is entered there, and nowhere else: never in a text field, never in the page.

Daily key. The passkey that opens your account and your Vault day to day: face, fingerprint, PIN, or a security key. There is no password beside it. The cards bring you back when every key is gone.

Cold Key. A physical engraved card carrying your encoded mark. A printed object, never issued digitally.

Cloak. An address that stands in for yours with one company only. Cut the cloak and that one door closes; your real address never moved.

Provenance. The record a nameplate carries for life: that it changed hands, and when. It is public and cannot be hidden.

Reservation. The hour the ceremony holds your chosen names while you finish. Walk away inside it and nothing exists: no account, no charge, nothing to undo.

Sovereign. Liir running on your own server instead of ours. Same rooms, your machine, your custody entirely, mail included.

Custody. Who holds the keys to a thing, and so who can truly open it. Most services keep custody of your data: they can read it, reset it, and hand it over. Liir does not take custody of your Vault. You hold the keys; we hold sealed boxes we cannot open. The Shelf and hosted mail are different, and we say so: those are in our custody, encrypted, under the limits in section 8. Every promise in this agreement stands on knowing which room you are in.