Terms of Use

These Terms of Use (the "Terms") form a binding electronic agreement between you (the "User" or "you") and the operator of needmoretruth.com (the "Operator", "we", "us") and govern your access to and use of the website, its sub-domains, and all related features, content, and functionality (collectively, the "Service"). By accessing or using the Service, or by clicking any control marked as acceptance of these Terms, you confirm that you have read and understood these Terms and agree to be bound by them. If you do not agree, you must not access or use the Service.

Last updated: 2026-08-22 · Version: 2026-08-22-v23

1. Definitions

"Service" means the website operated under needmoretruth.com and any related sub-domains, applications, and features. "User", "you", or "your" means any natural person who accesses or uses the Service. "Operator", "we", "us", or "our" means the natural person who operates the Service alone. The Operator charges no fee for the Service and carries no advertising on it. "Member" means a User who has authenticated through a supported OAuth identity provider; "Guest" means a User who has not. "Guest Mode" means the convenience feature that lets a Member submit Content under the same processing rules as a Guest (defined in Section 7). "Content" means any text, link, file, image, code, or other material submitted to the Service. "Public surface" means any place in the Service where other Users can see what you submit, such as the community boards, Truter, and comments. "Direct message" means a private message exchanged only between Members (Section 28); "Archive" means the separate-address storage feature described in Section 29. Direct messages and the Archive are not public surfaces. "Privacy Policy" means the document published at /privacy and incorporated into these Terms by reference. "Account" means an authenticated identity created when you sign in via a supported OAuth identity provider.

2. Acceptance and binding effect

These Terms become binding on you when you first access or use the Service, or when you click any control marked as acceptance of these Terms, whichever occurs first. Where the Service requires an explicit click-through acceptance — including the consent gate that precedes sign-in, browsing the community section, posting, commenting, reporting content, or contacting support — that click constitutes a binding electronic acceptance of these Terms and the Privacy Policy as of the version stated on the consent gate. If you do not accept, you may continue to read the home page, Terms of Use, and Privacy Policy, but you may not use any other feature of the Service.

3. Eligibility

You represent and warrant that (a) you are at least sixteen (16) years of age and otherwise of the legal age required to enter into a binding agreement under the laws of the jurisdiction in which you reside, (b) you are competent to enter into a binding agreement, and (c) you are not barred from receiving the Service under any law applicable to you, including export-control, sanctions, age, and professional-conduct rules. If you access the Service on behalf of an organisation, you represent and warrant that you have authority to bind that organisation to these Terms. The minimum age of sixteen is an operator policy set to align with the default age of consent for information-society services under EU/EEA GDPR Article 8; it sits above the fourteen-year floor permitted for personal-data processing under the Republic of Korea Personal Information Protection Act (PIPA), and where your local law sets a different age of digital consent that applies to you, the higher of that age or sixteen governs your eligibility. Authentication is delegated exclusively to third-party OAuth providers (GitHub), which apply their own age-verification policies; the Operator does not perform independent age verification and relies on these providers and on your own representation to enforce minimum-age requirements. The Operator does not knowingly permit the Service to be used by anyone below the applicable minimum age and does not seek verifiable parental consent to enrol younger children, because the Service is not directed to children below that age. If you believe that a person below the minimum age has nevertheless accessed the Service, please contact the Operator at [email protected] or through the in-Service Bug & Operations Reports channel and the Operator will close that account and delete the data without undue delay. A notice required of providers of interactive computer services in the United States: parental control protections — such as computer hardware, software, or filtering services — are commercially available and may assist you in limiting access to material that is harmful to minors. Protections of that kind include the controls built into the platforms you are most likely already using — Apple Screen Time, Google Family Link and Microsoft Family Safety, none of which costs extra — as well as products sold separately. The United States Federal Trade Commission publishes consumer information about protecting children online at https://consumer.ftc.gov; that is guidance, not a directory of approved products, and the Operator does not describe it as one. Naming any of these is not a recommendation by the Operator; it is the identification that the notice requires.

4. Accounts and authentication

Authentication is provided exclusively through third-party OAuth identity providers, currently GitHub. The Service does not collect, store, or process passwords. Only profile fields exposed by the identity provider — such as provider account ID, login name, public display name, avatar URL, and (where exposed) email address — are stored. You are solely responsible for the security of the third-party account you use to sign in and for all activity that occurs under your Account on the Service. When multiple Members would share the same display name, the later-joining Member receives a visible short suffix of letters and digits (for example, "name#A3F9K2") shown in a distinct typographic style so that it cannot be confused with the characters of the chosen name itself. The Operator may suspend or terminate your Account where you breach these Terms or where required by law, by giving you reasonable prior notice through the in-Service inbox or, where you have provided one, your sign-in email address. Notice may be omitted only where (i) you are causing material harm to the Service, other Users, or third parties, (ii) you have fundamentally breached these Terms, (iii) immediate action is required by law or to prevent a security incident, or (iv) prior notice would be impossible or impracticable. Termination without cause, where permitted by law for a free non-commercial service, will also be subject to reasonable prior notice except in the circumstances listed above.

5. User-submitted Content

You retain all ownership rights you may have in Content that you submit to the Service. The licence in this Section applies only to Content you post on a public surface. It does not apply to direct messages (Section 28) or to anything you place in the Archive (Section 29). By posting Content on a public surface, you grant the Operator a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, display, transmit, distribute, and cache that Content, for the sole purpose of operating, providing, and securing the Service. The Operator may alter how your Content is presented only in the ways listed here, and this list is closed: (a) formatting so it fits the page; (b) machine translation; (c) excerpting for a list or a preview; (d) hiding it or marking it with a notice as a result of moderation; (f) hiding the author's display name on a board whose settings turn author names off for everyone on that board, which is a display setting and not anonymity, and which is disclosed on that board before you post there; and (e) replacing the author's display name with an erased marker — but only where you ask for it, where you delete your account, where the law requires it, or where the display name itself is unlawful or infringes someone else's rights. No other modification, and no creation of derivative or adapted works, is included in this licence. The Operator does not itself use your Content to train or fine-tune artificial-intelligence models, and does not give or sell it to any third party for that purpose. That is a statement about what the Operator does, and it is not the whole picture: what you post on a public surface is readable by anyone, including the crawlers described in the next paragraph, and the Operator lets those crawlers in. Read the two together. Content on a public surface is, however, in a place anyone can read. The Operator's `robots.txt` permits the crawlers operated by artificial-intelligence companies to read public surfaces, so content you post publicly may end up in such a company's training data. The Operator has no control over what they actually do with it. Direct messages and the Archive are not public surfaces and are not reachable by those crawlers. When Content is deleted, the Service stops serving it at its address and the address returns not-found, so a crawler that comes back finds nothing there. Beyond that the Operator cannot reach into anyone else's copy. Two things can still be done and they are not the same, so here is which is which. The address returning not-found is itself the signal those crawlers use to drop a page, and that happens by itself on every deletion, with nothing asked of you. Submitting the address to the removal channels those companies publish is a step the Operator takes by hand, and there is nothing in the Service that tells it a page was deleted, so it has to be asked for: write to the contact in Section 2 naming the addresses, and the Operator submits them and tells you what came of it. If your account is already gone, say where to answer, because there is no longer an account to answer to. That is the limit of what the Operator can do: it has no control over what those companies then do. This licence does not authorise use of your Content for commercial purposes unrelated to the Service, for advertising, or for resale to third parties. This licence is sublicensable solely to subprocessors that operate the Service on the Operator's behalf (for example, hosting and backup providers). This licence is not transferable on its own. It passes only as part of an assignment permitted by Section 25, together with the thirty days' notice that Section requires. If you delete your account within that period, this licence does not pass. This licence ends when the Content is deleted from the Service, except that residual copies in backups, caches, and audit records remain until those copies fall out of their ordinary rotation. The Operator has no obligation to host, monitor, edit, or retain any specific Content.

6. Content rules

You must not submit Content that: (a) is unlawful or that promotes, facilitates, or encourages unlawful activity, including the sale of controlled substances, weapons, or unauthorised intrusion or denial-of-service tools; (b) infringes any patent, trademark, trade secret, copyright, right of publicity, or other right of any person; (c) is defamatory, harassing, hateful, threatening, or invasive of another's privacy; (d) is sexually explicit, sexually exploitative of any person, or depicts a minor in a sexual context; (e) depicts, glorifies, or encourages self-harm, suicide, or eating disorders; (f) plans, threatens, or encourages violence against any identified person or group; (g) contains malware, viruses, or any code intended to damage or disable any system; (h) is designed to harvest personal data or to phish credentials; or (i) violates any third party's intellectual-property or privacy rights. The Operator applies automated content filtering to the more serious categories above; as described in Section 10, the strictness of this filtering may be configured separately for each board, and matched Content may be refused, hidden pending the Operator's review, or flagged for review. The Operator may remove, hide, edit, refuse, or restrict access to any Content at the Operator's sole discretion, with or without notice. The Operator is not a publisher of User-submitted Content and does not endorse or warrant any User-submitted material.

7. Guest Mode for Members

A Member may, at the moment of submitting Content, toggle "submit as Guest". When this toggle is on, the Service processes the submission exactly as if it had originated from a logged-out Guest on the same connection: no link to your Account is stored, the public display name shown is the same daily Guest identifier that a logged-out visitor from your connection would receive, the Guest cooldown applies in place of the Member cooldown, and self-deletion requires the deletion password that you set at the time of submission. This is a convenience feature only. Because logging out and submitting as a Guest already produces an indistinguishable result, the toggle simply removes the need to log out and back in. Any attempt to manipulate the visible discourse by alternating between Member and Guest Mode — including operating multiple effective identities to inflate or suppress engagement signals — is your responsibility under Section 9; the absence of a database link does not absolve you of accountability under these Terms or under applicable law.

8. Reporting Content

Any visitor may report a post or comment that they believe violates these Terms via the in-Service report function attached to the Content. That form asks for a reason; for an explanation of why the content is said to be unlawful (required where the reason given is that it is unlawful or infringes copyright); for your name and an address to reach you at (both offered, neither required); and for your confirmation that what you have written is accurate and complete to the best of your knowledge. Reporting Content as unlawful or as infringing copyright is open to anyone — including a visitor who is under an access restriction, and one who has not accepted these Terms. Telling the Operator that something is unlawful is not part of the agreement between you and the Operator, so that route is not closed by the agreement. The rate limit, the flood guard and the human-verification challenge apply to everyone alike. Reports on the other grounds are about these house rules rather than about the law, and the ordinary conditions of use apply to them. A Member is sent a notice in the Service confirming receipt, and another when the Operator has decided; if you are not signed in and left an address, the Operator answers there by hand. Either notice tells you how to take it further: write to the contact in Section 31 and the Operator looks again, and nothing in this stops you going to a court or to an out-of-court dispute body. A high volume of reports against a single piece of Content raises the Operator's review priority but does not, on its own, hide or remove the Content; only the Operator's own review may do so. Coordinated or bad-faith reporting intended to suppress lawful Content is itself a violation of these Terms and may result in enforcement action against the reporting User or connection. Copyright owners and other rights holders may submit takedown requests through the Bug & Operations Reports channel; valid requests will be processed within a reasonable time. A notice should identify the work, the address of the material on the Service, and how to reach you. The Operator also adopts and applies this repeat-infringer policy: where a User or a connection point is the subject of repeated notices that the Operator finds well-founded, the Operator terminates that Account, and blocks that connection point from writing, in appropriate circumstances. What counts as repeated is judged case by case, and a pattern of three well-founded notices will ordinarily be enough. A User whose Account is terminated on this ground is told why and may appeal once under Section 10. A notice is kept with the outcome the Operator recorded for it, so that a pattern across notices can be seen. Two different things sit in that record and they are not kept for the same time. What identifies the person who sent the notice — the name and the address they left — belongs to that person: it is deleted as soon as the Operator has answered them, and Section 10 of the Privacy Policy sets the outside date. What the Operator decided about the reported account is the Operator's own record of its own act. It stays for the period in Section 10 of the Privacy Policy, because it is the only thing the repeat-infringer policy above can run on, and the only thing that lets a terminated account be shown the pattern held against it. Erasing the person who complained does not erase a finding about somebody else, and the Operator keeps nothing about the complainant beyond what is stated here. If your material was removed on a copyright notice and you believe that was a mistake, or that you are entitled to use the material, you may send a counter-notice to the contact in Section 31. Give your name and an address to reach you at; identify the material and where it was on the Service; state, under penalty of perjury, that you have a good-faith belief the material was removed as a result of mistake or misidentification; and state that you consent to the jurisdiction of a court where you live, or, if you are outside the United States, of a court where the Operator may be found, and that you will accept service of process from the person who sent the notice. The Operator forwards the counter-notice to that person and restores the material not less than ten and not more than fourteen business days later, unless the Operator is first told that they have gone to court to restrain you. This is the route United States copyright law provides, and the Operator applies it to anyone who asks, wherever they are.

9. Prohibited conduct

You must not, and you must not attempt to, and you must not permit any third party to: (a) circumvent, bypass, or interfere with rate limits, anti-spam controls, content fingerprinting, authentication, the human-verification challenge, or access controls of the Service; (b) probe, scan, or test the vulnerability of the Service or any related system, network, or infrastructure, except as expressly authorised in writing by the Operator; (c) submit automated traffic, scraping, crawling, or bulk requests to the Service, except as expressly authorised; (d) impersonate any person or misrepresent your affiliation; (e) interfere with any other User's use or enjoyment of the Service; (f) collect, store, transfer, or disclose personal data of other Users or visitors of the Service without their lawful consent; (g) reverse engineer, decompile, or disassemble any portion of the Service except as permitted by mandatory law; (h) use the Service in any manner that could overload, damage, or impair its operation; (i) operate multiple identities — whether through separate Accounts, alternation between Member and Guest Mode, or other means — to evade access restrictions, inflate engagement signals, or otherwise manipulate the visible discourse; or (j) use Guest Mode or any other feature of the Service to engage in any of the foregoing. Because the Operator processes only the minimum data necessary for safe operation, the Operator may, in some cases, be technically unable to identify the natural person responsible for a violation after the fact. This limitation is an intentional consequence of the data-minimisation design and does not transfer responsibility for your acts from you to the Operator. The Operator will cooperate in good faith with valid lawful requests from competent authorities, within the technical scope of the data actually retained at the time of the request, and will preserve the data it is required to preserve under applicable law.

10. Moderation and enforcement

The Service applies a combination of automated controls (rate limiting per daily IP hash and per Account, request deduplication, automated content filtering for the categories listed in Section 6, the strictness of which the Operator may configure separately for each board and which may refuse a submission, hide it pending review, or flag it for review, and a third-party human-verification challenge for write actions provided by Cloudflare Turnstile) and human review by the Operator. The Operator may apply the following enforcement actions, in any combination and at the Operator's sole discretion: warning, Content hiding, Content deletion, replacing the author's display name with an erased marker in connection with specific Content (only in the cases set out in Section 5(e)), an access restriction keyed to the current day's IP hash ("IP ban") which auto-expires when the daily IP-hashing salt rotates (see Section 12 and the Privacy Policy), an Account-level write timeout for a stated duration, and Account suspension or termination, including permanently. All administrator actions are recorded in an internal audit log used only for moderation review. Affected Users may submit one appeal per restriction through the in-Service form on the access-restriction notice page. One per restriction means one from you: signed in, it is counted against your Account; not signed in, it is counted against the connection you are writing from, for that particular restriction. Somebody else on the same line using the form does not spend yours. The form covers all three kinds of restriction — a block on the connection, an Account restriction, and a pause on posting. This one-appeal limit is without prejudice to any mandatory legal right of review you may have under applicable law (such as the right to obtain human review of a significant automated decision under EU/EEA GDPR Article 22, the safeguards for significant decisions based on automated processing under Articles 22A to 22C of the UK GDPR, equivalent rights under the Republic of Korea Personal Information Protection Act, or analogous protections in other jurisdictions). The Operator answers every appeal and gives the reason for the action. Where it answers depends on what it can reach: if you are signed in, the answer arrives as a notice in the Service, and that notice carries both halves — the outcome, which is that the restriction stands, is shortened, or is lifted, and the Operator's reason in its own words. If you are not, the only thing the appeal form holds is an address you chose to leave on it — the form asks for one and does not require it — and without one there is nothing to answer to, because the day's connection value is not something the Operator can turn back into a person. If you want an answer and did not leave an address, write to the contact in Section 31. Where saying everything would show someone how to evade the filters, the Operator says which rule was applied and what the action was, and withholds only the detail that would do that — it does not withhold the reason itself. The one-appeal limit set out above, and the discretion to withhold filter-evasion detail also set out above, apply only to actions a person decided. They do not apply to actions taken automatically without human review — in particular the block, keyed to the current day's IP hash, that stops writing until UTC midnight. For those there is no limit on how many times you may ask. The form on the notice page itself takes one note per restriction — it is a note, not the whole route — and the other two routes carry no limit at all: the in-Service Bug & Operations Reports channel and the email address in Section 31. The three things you may ask for are separate and you may ask for each of them: you may object or ask for an explanation at any time, the Operator answers within thirty days, and a person looks at the decision again. How to do so is set out in Section 12 of the Privacy Policy.

11. Content deletion and moderation authority

The Operator retains full authority to delete, hide, or modify any Content at any time, including for reasons of safety, legal compliance, or community standards. Moderation decisions are final as between the User and the Operator, subject only to mandatory legal rights of appeal or review that the User may have under applicable law. Members may delete their own posts and comments at any time from the Service interface. Deletion is permanent and irreversible; the Operator cannot recover deleted Content. Guests, and Members using Guest Mode, must set a deletion password at the time of submission. This password is the sole means of self-deletion and is stored as a one-way cryptographic hash that the Operator cannot reverse. If the password is forgotten, self-deletion is permanently impossible. The Operator does not provide any recovery mechanism for deletion passwords; this absence of recovery is an intentional consequence of the data-minimisation design described in the Privacy Policy, and the responsibility for retaining the password rests with the User. The Operator cannot verify the identity of a User who submitted as a Guest or in Guest Mode. Deletion requests submitted via the Bug & Operations Reports channel will be processed only if the Content violates these Terms or applicable law, as determined solely by the Operator, except where mandatory law (such as the GDPR right to erasure or the PIPA right of deletion) requires deletion regardless of these Terms. Requests to delete Content that does not violate these Terms and is not subject to a mandatory deletion right will be declined. Do not include personal data (real names, addresses, telephone numbers, national identification numbers, financial information, or other sensitive data) in Content submitted as a Guest or in Guest Mode. Such information cannot be guaranteed to be deleted if the deletion password is lost. The Operator is not liable for personal information voluntarily and unnecessarily included in User-submitted Content.

12. Access restrictions

The Operator may restrict access to the Service through the following tiered measures, applied in combination as needed: (a) an "IP ban" keyed to the current day's IP hash, which automatically expires at most twenty-four (24) hours after the most recent rotation of the daily IP-hashing salt; (b) an Account-level write timeout preventing a Member from posting, commenting, or otherwise writing for a stated duration; and (c) Account suspension or termination, which may be permanent. The first measure is short by design: because the Service stores no raw IP address and the daily salt is unrecoverable after rotation, an "IP ban" cannot meaningfully bind any address beyond the current day. This is an intentional consequence of the data-minimisation design described in the Privacy Policy, and the Operator acknowledges that determined attackers will rotate their network paths and so cannot in practice be excluded by IP-level restriction alone. A User affected by an IP ban will see a notice page explaining the approximate time until automatic expiry; that page contains a one-shot form that allows the User to send the Operator a written account of the situation. Because most IP bans expire automatically before they could be reviewed, that form exists to inform future moderation rather than to lift the current restriction. Account-level measures, by contrast, are not affected by salt rotation and may be permanent.

13. Intellectual property

All software, source code, design, branding, logos, layouts, graphics, original written content (other than User-submitted Content), and other materials forming part of the Service are owned by the Operator or licensed to the Operator and are protected by copyright, trademark, and other applicable intellectual-property laws. Subject to these Terms, the Operator grants you a limited, revocable, non-exclusive, non-transferable, non-sublicensable licence to access and use the Service for personal, non-commercial purposes. No other rights are granted by implication, estoppel, or otherwise. Trademarks, logos, and service marks displayed on the Service may not be used without the prior written consent of the Operator or, where applicable, the relevant third-party rights holder. For the avoidance of doubt, this Section 13 does not apply to the Soundtrack (the NMB background music), which is governed solely by Section 27 and its separate access terms; the Operator makes no claim of authorship of the Soundtrack and presents NMB as its source only. The copyright status of the Soundtrack is uncertain and unsettled; nothing here is an admission that no rights exist, nor a waiver, transfer, or licence of any such right, and the Operator does not waive and expressly reserves any rights — including any rights it may have under unfair-competition law — that do or may subsist in the Soundtrack, now or in future. The access terms in Section 27 prevail over the licence in this Section as to the Soundtrack.

14. Third-party services

The Service relies on third-party providers including but not limited to GitHub (authentication), Cloudflare (DNS, edge, TLS termination, tunnelling between the public internet and the origin server, and the Turnstile human-verification challenge presented for write actions), and the operating system, runtime, and database software running on the origin server. The Operator does not control these providers and is not responsible for their availability, policies, performance, or actions. Your interactions with these providers are governed by the providers' own terms of service and privacy policies.

15. Privacy

Your use of the Service is also governed by the Privacy Policy, which is incorporated into these Terms by reference. Reading the Privacy Policy is required before granting consent. Capitalised terms used in the Privacy Policy and not otherwise defined there have the meanings given to them in these Terms.

16. Disclaimer of warranties

The Service is provided as it is. The Operator does not promise that it will always be available, that it will run without interruption, or that it will be free of errors. One person runs the Service and charges nothing for it, and the Operator guarantees no particular level of availability, response time, or durability of stored data. The Operator does not check Content submitted by Users before it appears, and does not promise that any Content is accurate, current, or reliable. To the extent permitted by applicable law, the Operator disclaims the implied warranties of merchantability, fitness for a particular purpose, and non-infringement. Nothing in these Terms affects any statutory guarantee or warranty that cannot be excluded or limited under mandatory consumer-protection law in your country of residence. That includes the conformity rights users have in the EU and the UK for digital content and digital services: this Section does not exclude or narrow them. This Section states what the Operator does not promise; it does not lower a standard the law sets.

17. Limitation of liability

To the maximum extent permitted by applicable law, the Operator is not liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, business, data, goodwill, or other intangible losses, arising out of or in connection with your use of, or inability to use, the Service. This applies regardless of the legal theory on which a claim is based and regardless of whether the Operator knew such damages were possible. The Service is provided free of charge, so there is no liability cap measured by what you paid. The Operator's liability is limited to the extent permitted by applicable law. Nothing in these Terms excludes or limits the Operator's liability for: (a) death or personal injury caused by the Operator's negligence; (b) the Operator's gross negligence or wilful misconduct; (c) fraud or fraudulent misrepresentation; or (d) any other liability that applicable law does not permit to be excluded or limited, including mandatory consumer-protection liability under the laws of your country of residence. Some jurisdictions do not allow the exclusion or limitation of certain warranties or damages; in those jurisdictions the Operator's liability is limited to the greatest extent permitted by law.

18. Indemnification

If you breach these Terms, break the law, or infringe someone else's rights, and the Operator incurs a claim, loss, or cost (including reasonable legal fees) as a result, you will cover it to that extent. This Section applies only where you acted intentionally or negligently, and does not apply to any part caused by the Operator's own acts or omissions. Merely using the Service, or merely having submitted Content, does not trigger this Section. This Section applies only to the extent permitted by applicable law, and does not apply to the extent that a mandatory consumer-protection law of your country of residence limits or prohibits such an obligation.

19. Suspension and termination

The Operator may suspend or terminate your access to the Service in accordance with Section 4 (Accounts and authentication) and Section 10 (Moderation and enforcement). Where the Operator terminates or suspends your account, you will be told why and given a chance to appeal. That holds however clear the breach looks: a clear case is the easiest one to state a reason for, and being sure is not a ground for saying nothing. Where you see it: while an account restriction is in force, every page other than the access-restriction page itself carries a notice at the top with a link to that page, and the Operator also sends a notice into your in-Service notice list setting out the reason. The access-restriction page states the reason recorded against the account, how long the restriction runs — or that it has no end date — that it applies to the Service as a whole, and it carries the appeal form. If you cannot sign in at all the route does not close: write to the contact in Section 31 and say which account it is. Before giving out the reason recorded against an account, the Operator satisfies itself that it is writing to the person who holds it, by asking for something only that person would have — the address the account signs in with, or a message sent from the account itself. Where that cannot be satisfied the Operator says so and tells you only that a restriction exists, because telling a stranger why somebody else was restricted would be a disclosure about that other person. You may stop using the Service at any time, and you can delete your own account from the Account area of the settings page. Deleting an account cannot be undone. If the Operator decides to shut the Service down entirely, notice is posted in the Service at least thirty (30) days beforehand, and during that period you can obtain a copy of the data tied to your account. What that copy contains, and what it leaves out, is set out in Section 11 of the Privacy Policy. Archive deposits are drop-only and are not part of it (Section 29); you can ask for them to be deleted by the route that Section gives. This does not apply where the Operator must stop immediately for reasons outside the Operator's control — such as the hosting provider ceasing service, a legal order, or a disaster — in which case the Operator will give notice as soon as it can. Upon termination, all rights granted to you under these Terms cease immediately. Sections of these Terms which by their nature are intended to survive termination — including ownership, indemnification, disclaimers of warranties, limitation of liability, governing law, and dispute resolution — will so survive. The survival of those Sections does not exclude or limit any right that cannot be excluded or limited under mandatory consumer-protection law in your country of residence, which continues to apply after termination to the same extent as before. The handling and deletion of your Account data and Content following termination are governed by Section 11 (Content deletion and moderation authority), by the Data retention section of the Privacy Policy, and by your rights under applicable data-protection law.

20. Changes to these Terms

The Operator may amend, modify, or replace these Terms at any time. The current version is identified by the version label and the "last updated" date displayed at the top of this page. When the version changes, you will be required to re-accept the updated Terms before using any feature that requires acceptance. Continued use of the Service after acceptance of an updated version constitutes acceptance of that version.

21. Governing law

These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims) are governed by and construed in accordance with the laws of the Republic of Korea, without regard to its conflict-of-laws provisions. Where a mandatory consumer-protection law of your country of residence grants you stronger rights or protection, that mandatory law will apply to that extent.

22. Dispute resolution

The parties will first attempt in good faith to resolve any dispute arising out of or in connection with these Terms by informal contact through the Support channel, and the parties are encouraged to allow up to sixty (60) days for that informal resolution. This informal step is voluntary: it is not a precondition to, and does not delay or limit, either party's right to bring proceedings before a competent court at any time. Any dispute may be brought before the competent courts of the Republic of Korea, whose jurisdiction is non-exclusive: nothing in this section prevents you from bringing proceedings in the courts of your country of residence where mandatory consumer-protection rules of that jurisdiction grant you such a right, nothing in this section requires you to wait before exercising any mandatory right to bring proceedings before a competent court, and nothing in this section limits any mandatory right you may have to refer the dispute to a competent supervisory authority (such as a data-protection regulator).

23. Severability and entire agreement

If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision is severed from these Terms and the remaining provisions continue in full force and effect. The Operator does not ask for an invalid provision to be read down into a valid one: doing so would empty out the rule that made it invalid in order to protect you. Whatever that provision covered is governed instead by the default rules of the applicable law. Where Korean law governs, Article 16 of the Republic of Korea Act on the Regulation of Terms and Conditions adds a limit to that: if what is left cannot achieve the purpose of the agreement, or is unfairly disadvantageous to one party, the agreement is void. Section 21 makes Korean law the governing law, so that limit reaches everyone; this Section does not carve anybody out of it. European law is not its opposite either. Article 6(1) of Council Directive 93/13/EEC keeps the rest of the contract binding only “if it is capable of continuing in existence without the unfair terms”, which is the same proviso in different words. Where the mandatory consumer law of your country of residence gives you a different outcome in the case at hand, that law applies to you to that extent — Section 21 provides for it, and Article 6(2) of the same Directive requires it where you are in the Union and the agreement has a close connection with it. This Section does not decide in advance which of two mandatory rules is better for you; that is decided in the case. These Terms, the Privacy Policy, and any additional document published within the Service together form the agreement between you and the Operator regarding the Service, and supersede all prior or contemporaneous agreements, communications, and understandings, whether written or oral, on the same subject matter. How those documents relate to one another is governed by Section 30 (Order of precedence).

24. Languages and controlling version

These Terms are originally drafted in the English language and the Operator may publish translations (including a Korean translation) for the convenience of readers. Each language version is intended to express the same substantive rights and obligations and is binding on a User who has accepted the Terms in that language. Where the English version and a translation set out genuinely different obligations and therefore conflict, the English version prevails. Where wording in either language is merely capable of more than one reading, the English version does not prevail and the wording is read in the way most favourable to the User. The same rule applies to the Privacy Policy. Nothing in this section limits any mandatory consumer-protection law of your country of residence that requires the Operator to communicate with you, or to enforce certain provisions, in your local language; in such cases, that mandatory law continues to apply notwithstanding this section.

25. No waiver; assignment

Failure or delay by the Operator in enforcing any provision of these Terms is not a waiver of the right to enforce that provision later or to enforce any other provision. Neither party may assign or transfer its rights or obligations under these Terms without the other's prior consent. The one exception is that the Operator may assign these Terms, without your consent, to a person who will continue to provide the Service in substantially the same form — but only on at least thirty (30) days' notice. Where the Operator holds an email address for you — Section 4 of the Privacy Policy states that the identity provider's address is stored where the provider exposes one — that notice is sent to you individually at that address by the Operator, because Article 27(1) of the Republic of Korea Personal Information Protection Act and Article 29(1) of its Enforcement Decree require a written or equivalent means and put that duty on the Operator rather than on the software. The Service itself has no mailer; the Operator sends it by hand, which is workable because an assignment happens once. Where the Operator holds no address for you, and so cannot reach you individually without fault of its own, Article 29(2) of the same Enforcement Decree provides for what it does instead: the items are posted on the website for thirty days or more. That is what happens here — the notice is posted in the Service for the whole thirty-day period, and it is posted for everyone, not only for those the Operator cannot otherwise reach. The notice states, as Article 27(1) of the Republic of Korea Personal Information Protection Act requires, that personal data is being transferred; the name, address, telephone number and other contact details of the person receiving it; and what you can do and how, if you do not want the transfer — which is to delete your account before the thirty days end. It also states how to obtain a copy of your data. That copy has the same scope as in Section 19. Any attempted assignment in violation of this section is void.

26. Game multiplayer

NMB's multiplayer (3-4 player co-op) mode is optional. Connections are made directly between participants' devices (peer-to-peer): one user's device acts as the host and runs the session, and the other participants connect to that host. The Operator runs only a lightweight signaling server that brokers the initial connection; once connected, gameplay and chat travel directly between participants and do not pass through the Operator, so the Operator does not host, relay, see, or store them. Because connections are peer-to-peer, a participant's IP address may be visible to other participants in the same session, especially the host. A relay (TURN) may sometimes mask it, but this is not guaranteed. Optional real-time chat travels over the peer-to-peer connection and is relayed by the host (another user), not by the Operator. The Operator does not receive, see, or store chat and therefore cannot moderate it, and there is no profanity or content filter. Chat is sanitized by the software only for control characters and length and is not stored on any server. A room is reached only via its invite link and code; there is no public room listing. A new room defaults to "Approval" mode, in which the host approves each joiner individually; if the host switches the room to "Open" mode, anyone holding the link and code, including people you do not know, joins immediately and can play and chat with you. In Open mode, or in a room whose code has been shared, you may therefore encounter strangers. The host may approve joiners, disable chat, or remove (kick) participants; you may report abuse to the Operator; and the Operator may review reports and take action, including suspending the multiplayer connection service. The Service is not advertised as moderated or safe. Consistent with the minimum age in Section 3, multiplayer and chat are for users sixteen (16) or older; age is self-declared and not verified.

27. Game soundtrack and music

NMB includes background music (the "Soundtrack"). The Soundtrack is provided under its own separate terms of access, which are served together with the game and are the controlling terms for any use of the music; this Section is a short summary and does not replace them. You may use the Soundtrack in your own videos, livestreams, broadcasts, and similar content, including monetized content — where you are paid for your own content and the music merely rides along inside it — provided you clearly and visibly credit the source as Music: NMB — needmoretruth.com, and do not claim or imply any authorship or origin credit for the music (including presenting it as your own work, or as your remix, edit, cover, or version, or as coming from any source other than NMB, whether for yourself or any other artist). You may not, without separate written permission: make money from the music itself, or place it behind a paywall, paid tier, or membership; sell or otherwise commercialize the music; re-upload or redistribute the audio on its own; put it into another game, app, or product; use it in an advertisement or other work a brand commissions or controls (sponsored videos that you control are generally fine; advertisements or brand-commissioned work need permission first); use it to train, fine-tune, or evaluate any AI or machine-learning model, or for automated data mining; register, claim, or monetize it in any content-identification or rights-management system such as Content ID; or create remixes, covers, mashups, or other derivative audio from it. You also may not use it in content that is unlawful or that the full terms specifically prohibit (a narrow floor covering, for example, content that sexualizes a minor, promotes terrorism, violent extremism, or hatred, harasses or doxxes a person, or is fraudulent or deceptive). These are examples only; further conditions apply under the full terms in LICENSE.txt, which control. The Operator attributes the Soundtrack as source only, makes no claim of authorship, and gives no warranty of title. The copyright status of the Soundtrack is uncertain and unsettled; the Operator does not waive and expressly reserves any rights — including any rights it may have under unfair-competition law (in Korea, the Unfair Competition Prevention and Trade Secret Protection Act) — that do or may subsist in it, now or in future, and nothing in this Section is a waiver, transfer, or licence of any such right. Those access terms apply as a condition of using the music regardless of how copyright may or may not subsist in it. For the avoidance of doubt, the Soundtrack is excluded from the ownership and copyright statement in Section 13, and this Section governs its use. The full, current terms are available at https://needmoretruth.com/games/nmb/audio/LICENSE.txt, and we will provide the current text on request at the contact address below.

28. Direct messages

Members can exchange direct messages that pass only between the two of them. A direct message is not a public surface and is not shown to other users. It is not, however, sealed from the Operator: as set out below, the Operator is technically able to read it. Direct messages are stored on the server unencrypted. This is not end-to-end encryption, so the Operator, who can reach the server's data, is technically able to read them. The Service has no report button attached to a direct message. If you receive a message you believe is unlawful, tell the Operator through the in-Service Bug & Operations Reports channel with enough detail to find it — who sent it and roughly when. That channel is the notice route for direct messages and for the Archive, it is open to Members and to anyone else, and the Operator tells the person who sent the notice what it decided and why. The Operator reads the body of a direct message only where a lawful warrant or court order requires it. When fixing a fault in the Service the Operator works from the outside of a message — identifiers, timestamps, size — not its body. There is no administrator screen for this, so neither kind of access happens through a control the Service enforces — the Operator would be working directly against the database. That is stated rather than glossed, because it decides what the following promise is worth: it is an undertaking the Operator gives, not a lock the machine holds. The Operator undertakes that on any access to the body of a direct message it records the access, its time, its scope and its ground in the audit log, and tells both people in that conversation afterwards, unless the law forbids telling them. Building a sanctioned read path that produces that record automatically is on the Operator's list, and until it exists this paragraph is what stands. The licence in Section 5 does not apply to direct messages. A message you have sent cannot be edited. You can choose in settings who may message you (everyone, people you follow, or no one), and blocking someone stops new messages from that person. You can hide a conversation from your own list, but hiding it does not remove it from the other person's list, and it reappears for you if a new message arrives. Deleting your account also deletes the conversations your account was part of and the messages inside them, including messages the other person wrote.

29. Archive

The Archive is a feature that opens at a separate address which is not linked from anywhere else in the Service. A code obtained from the Operator is required to enter. The Archive is drop-only. Whoever deposits something cannot retrieve it or see a list of it afterwards. A reply can be read only where the Operator has opened a pickup inbox for that purpose. What you deposit is encrypted to the Operator's public key before it is stored. The matching private key is held by this Service's server, so the Operator is able to open what you deposit. This Section does not promise end-to-end encryption. Executable files are refused, and a file's type is determined from the file itself rather than from its declared name. There is an upper limit on the size of a single deposit. The licence in Section 5 does not apply to anything deposited in the Archive. The Operator does not publish deposits and does not place them on any public surface of the Service. If you want something you deposited removed, tell the Operator through the contact point in Section 31. The Archive stores no identity for a depositor, so the Operator cannot recognise you from an account; what it can do is find the deposit from what you tell it. Give the file name, the approximate time you left it, or anything else that identifies it, and the Operator will act on that. If what you provide is not enough to identify a deposit, the Operator says so and says what else would help; it does not refuse the request in advance. The same route is open to someone who is not the depositor. If you believe material about you was left here by someone else, tell the Operator through the same contact point, describing the material and roughly when it may have been left. You do not have to prove you are the depositor to use this route, because you are not. What the Operator does with it is bounded, and the bounds are stated because this route could otherwise be used to reach into other people's deposits. It opens a deposit only so far as is needed to check the claim; it deletes only what actually relates to the person who asked; and it needs enough to identify the material — a bare claim over a wide period is answered by asking for more, not by opening everything in that period. It tells you what it found. How long a deposit is kept: until the Operator has dealt with what was left and no longer needs it. A deposit has no account behind it, so no fixed period can be attached to it in advance; instead the Operator reviews the Archive at least once every twelve months and deletes everything that is no longer needed at that review. Deleting a deposit removes it from the live Service at once. Copies inside backups go on the schedule in Section 10 of the Privacy Policy — up to about three months on the origin disk, ninety-one days for the off-site copy — and the off-site storage refuses deletion of anything younger than ninety days, so an earlier removal there is not possible even on request. What happens to that copy in the meantime is set out in Section 10 of the Privacy Policy: it is opened for nothing but a restore and a restore check, and if a restore ever happens the Operator re-applies, before the service comes back, the deletions it holds outside the database, and posts a notice in the Service that a restore has happened so that anything not carried by the copy can be asked for again. You must not deposit material that breaks the law or infringes anyone else's rights. The Operator may delete such material and may revoke the code.

30. Order of precedence

More than one document can apply to your use of the Service: these Terms, the Privacy Policy, additional terms that apply to a particular channel, and the Code of Conduct that applies to channel moderators. Where they conflict, they apply in this order: (a) mandatory law of your country of residence; (b) for anything about the handling of personal data, the Privacy Policy; (c) these Terms; (d) channel-level additional terms and the Code of Conduct. A document that has not been published does not bind you. Channel-level additional terms are shown in full, in the place where they apply, before you write in that channel; a condition that was not shown has no effect. The Code of Conduct is published permanently for anyone to read. Channel-level additional terms may only add, never subtract. They may add rules that apply in that channel, or give you more than these Terms give you. They may not widen the Operator's licence, extend retention, narrow your rights of deletion or access, or reduce the Operator's liability further. A provision that does so has no effect to that extent. Where two or more of these documents say different things about the same matter, whichever is more favourable to you applies, regardless of the order above. For the handling of personal data, whichever is more favourable to the data subject applies.

31. Contact

The Operator provides the Service from the Republic of Korea (대한민국). Questions or notices about these Terms can be sent by email to [email protected], or through the in-Service Support channel, or through the in-Service Bug & Operations Reports channel for technical or operational concerns. The in-Service forms are the preferred channels because they let your request be tracked and handled fairly; the email address above is provided as a direct alternative and as the contact point of the Operator for the purposes of applicable data-protection law. One person runs the Service; it charges no fee and carries no advertising. Consistent with the data-minimisation design of the Service, the Operator does not publish a personal legal name or postal address; the country of establishment and the contact email above are the Operator's disclosed identifying and contact details.