Terms of service

Draft of 15 October 2026

Draft for review: not in effect yet

This text describes what credforge stores and does, and is waiting for review by the people who run this site. Highlighted parts still need to be filled in.

The agreement

These terms are between you and [name and postal address of whoever runs credforge.app], who run credforge.app. By creating an account you accept them, for yourself and for any organization you set up or join. If you use credforge.app for an organization, you confirm you may act for it.

What the service does

credforge.app lets organizations create achievements and award them as signed Open Badges 3.0 credentials, email recipients their badges, publish a page for each badge, and revoke badges. Anyone can check a badge’s signature, status and dates.

A badge says that the organization awarded it. credforge.app doesn’t check whether the achievement happened. “Website verified” on an issuer’s page means only that the issuer proved control of that website’s domain; otherwise the website is self-reported.

Accounts and organizations

  • Give accurate information and keep your password and API keys secret.
  • Owners and admins must use two-step verification. You are responsible for what happens under your account and your organization’s API keys.
  • New organizations are reviewed. Until one is approved it can only award badges to its own members. We may decline an organization without giving a reason.
  • Each organization can send a limited number of award emails a day. We may change the limit.

Your responsibilities as an issuer

  • Award badges only for achievements that are real, under your own organization’s name.
  • Have the right to give us recipients’ names and email addresses and to email them their badges, under the laws that apply to you.
  • Correct or revoke a badge when it turns out to be wrong.
  • Answer recipients’ requests about their data. To delete a recipient’s data, use “Erase this person’s data” on one of their badges; we may do it for you when a request reaches us and you don’t answer.
  • You keep the rights to your content (names, descriptions, images). You let us store, sign, publish and send it to run the service, including after you leave, so that badges you awarded can still be checked.

Not allowed

  • Pretending to be another organization or person.
  • Phishing, spam, or emails people didn’t expect from you.
  • Badges for things that didn’t happen, or content that is unlawful or abusive.
  • Uploading malware or anything meant to harm the people who open it.
  • Getting around rate limits, probing or attacking the service, or using it to attack others.

Report misuse to abuse@credforge.app, or with “Report a problem” on any badge or issuer page.

Suspension and leaving

We may suspend an organization that breaks these terms. A suspended organization can’t award or email badges. Badges it awarded earlier stay checkable unless they are revoked, which we may do for badges that are fraudulent or abusive.

You may stop using the service at any time. [What happens to an organization’s data when it leaves, and how to ask for an account to be deleted.]

Fees

[Whether the service is free, and how prices would be introduced.]

No warranty, limited liability

We work to keep credforge.app available and badges checkable, but the service is provided as it is, without guarantees. [Limitation of liability and indemnity wording, with legal advice.]

Open source

credforge’s source code is available under the Apache-2.0 license. That license covers the code, not the content organizations put on credforge.app.

Changes and law

We’ll post changes on this page and tell account holders by email about important ones. Using the service after a change means you accept it. [Governing law and where disputes are decided.]