1. Acceptance of Terms

By accessing or using secauth.io (the "Platform"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Platform. These Terms constitute a legally binding agreement between you and Alec Grogan ("Operator," "we," "us," or "our").

We reserve the right to modify these Terms at any time. Continued use of the Platform following any changes constitutes your acceptance of the revised Terms. The effective date at the top of this document reflects the most recent revision.

2. Description of Service

secauth.io is an authentication platform demonstration project. The Platform provides the following features for demonstration and research purposes:

• User account registration and authentication
• Time-based one-time password (TOTP) two-factor authentication
• Browser fingerprint intelligence and device identification ("BFP System")
• Session management using JSON Web Tokens (JWT)
• Risk scoring based on device signals and behavioral patterns

The Platform is provided for educational, research, and portfolio demonstration purposes only. It is not intended for production use, storage of sensitive personal data, or commercial applications.

3. Account Registration

To access certain features of the Platform, you must register for an account. By registering, you represent and warrant that:

• You are at least 13 years of age
• All information you provide is accurate, current, and complete
• You will maintain the accuracy of your account information
• You are responsible for maintaining the confidentiality of your credentials
• You will notify us immediately of any unauthorized use of your account
• You will not create accounts for the purpose of automated access, scraping, or abuse

We reserve the right to suspend or terminate any account that violates these Terms, provides false information, or engages in abusive behavior toward the Platform or other users.

4. Acceptable Use

You agree not to use the Platform to:

• Attempt to circumvent, disable, or interfere with security features
• Conduct unauthorized penetration testing or vulnerability scanning without express written permission from the Operator
• Upload, transmit, or store malicious code, viruses, or harmful content
• Impersonate any person or entity or misrepresent your affiliation
• Engage in credential stuffing, brute force attacks, or automated abuse
• Violate any applicable local, state, national, or international law
• Collect or harvest data about other users without their consent
• Use the Platform for any commercial purpose without prior written consent

Violations of these acceptable use provisions may result in immediate account termination and, where applicable, referral to law enforcement.

5. Device Fingerprinting and Security Intelligence

The Platform operates a Browser Fingerprint (BFP) Intelligence System that collects device and behavioral signals for security and research purposes. This system is described in detail in our Privacy Policy.

By creating an account, you explicitly consent to the collection of device signals including canvas fingerprints, WebGL renderer information, audio context signatures, installed font detection, and behavioral signals (mouse movement patterns, scroll behavior, and interaction timing).

This data is used solely for:

• Identifying and associating known devices with your account
• Computing risk scores to protect your account from unauthorized access
• Research and development of authentication security systems

6. Two-Factor Authentication

The Platform requires Time-Based One-Time Password (TOTP) enrollment as part of the registration process. You are responsible for:

• Securely storing your authenticator app backup codes or recovery information
• Maintaining access to your registered authenticator device
• Notifying us if you lose access to your authenticator

The Operator is not responsible for account lockout resulting from loss of access to your authenticator application. Account recovery may require administrative intervention and identity verification.

7. Intellectual Property

The Platform, including its design, code, algorithms, and documentation, is the intellectual property of Alec Grogan. You may not reproduce, distribute, modify, create derivative works, or reverse engineer any part of the Platform without express written permission.

Content you submit to the Platform (account information, profile data) remains your property, subject to the license you grant us to operate the service.

8. Disclaimers and Limitation of Liability

THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

The Operator does not warrant that:

• The Platform will be uninterrupted, error-free, or secure
• Any defects will be corrected
• The Platform is free of viruses or other harmful components
• Results obtained from using the Platform will be accurate or reliable

To the maximum extent permitted by law, the Operator shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the Platform.

This Platform is a demonstration project. Do not store sensitive, confidential, or irreplaceable information in your account.

9. Privacy

Your use of the Platform is governed by our Privacy Policy, which is incorporated into these Terms by reference. Please review our Privacy Policy carefully before using the Platform.

10. Account Termination

You may request deletion of your account at any time by contacting the Operator. The Operator reserves the right to suspend or terminate accounts that:

• Violate these Terms
• Engage in abusive, fraudulent, or illegal behavior
• Have been inactive for an extended period
• Pose a security risk to the Platform or other users

Upon termination, your right to access the Platform ceases immediately. Certain data may be retained in audit logs as required for security and legal compliance purposes, as described in our Privacy Policy.

11. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of Colorado, United States, without regard to its conflict of law provisions. Any disputes arising under these Terms shall be subject to the exclusive jurisdiction of the courts located in Colorado.

12. Contact

Questions about these Terms should be directed to:
Alec Grogan
[email protected]
alecgrogan.com