DARKPHISH COMMUNITY

Community License Terms

Free Community activation for one installation, up to 100 managed users and one active campaign, valid for 365 days. No payment details, automatic charges or paid subscription. These terms cover the hosted registration and activation service; the software's open-source licence remains separate.

1. Service provider and scope

Planned provider: Dark Army s. r. o., Slovakia. The company has not yet been incorporated, as confirmed by the project owner. It is not identified here as an existing service provider. Before publication, identify the actual contracting provider; references to “we” and “us” below are proposed wording for that provider. Proposed contact: info@darkarmy.sk (mailbox confirmed by the project owner).

Proposed address supplied by the project owner

Ulica Ivana Krasku 4257/27, 917 05 Trnava, Slovakia — not a verified registered office of Dark Army

Company identification number (IČO)

XXXX — placeholder, not an assigned number

Commercial Register

Not yet incorporated; entry details to be completed after registration

Additional provider information

[CONFIRM: applicable business contact, tax and supervisory details]

These terms cover requesting, receiving and managing a Community activation through the registration page at www.darkphish.sk and the licensing API operated on fsociety.sk. They do not grant permission to test systems belonging to anyone else.

If you request activation for an organization, you must be authorized to act for it. You must have legal capacity to enter into the service arrangement. Professional and Enterprise editions and any paid services require a separate agreement; requesting a Community activation does not order those services.

2. Open-source software remains separately licensed

DarkPhish includes open-source software governed by the licence notices supplied with the software, including the MIT licence. These service terms do not replace those notices, withdraw rights they grant, or impose additional restrictions on exercising those rights. Community activation limits describe access supplied through this hosted service. Suspension of this service does not revoke an independent open-source licence.

3. Community activation

The current Community service is free of charge and provides activation for one installation, up to 100 managed users and one active campaign. A newly issued activation is valid for 365 days from issuance unless suspended or revoked under these terms. Registration does not create a paid subscription or automatic charge.

Renewal and installation resets are handled by the service administrator. Requesting a replacement key does not extend the expiry date, remove an installation binding, or restore a revoked activation. Contact us if you need help moving an installation or renewing access.

Your license status in the application shows the limits and expiry applicable to your activation. Community activation does not include a paid support agreement or a promise of additional Professional or Enterprise features. You are responsible for your hosting, network and email-delivery costs.

4. Registration, verification and key recovery

Use an email address you control. Review these terms and the Licensing Privacy Notice before submitting the form. You can correct the address before submission. Registration and verification are offered in English; the required local-language information must also be made available where applicable.

After you request a license, we send a verification link that expires after 30 minutes. Opening the link alone does not issue a key: you must explicitly confirm verification. A successful confirmation displays your activation key once. The current service sends the verification link by email, not the resulting activation key.

Keep your key confidential. If it is lost, verify the same mailbox again to obtain a replacement; the previous activation key is replaced. We record the accepted terms version with the request and license record. You may request a copy of the applicable terms and your service information by contacting us.

Submitting the form requests verification; it does not itself issue an activation. Service access is provided when verification succeeds and a key is issued. Save the key when it is displayed. You can save or print these terms from your browser. Do not send activation keys, refresh tokens or private signing keys in support email.

5. Authorized use and responsibility

Use the service for lawful, authorized security awareness training and testing. You are responsible for obtaining the necessary authorization from the owners of systems and the relevant organization, and for complying with obligations toward people whose information you process.

Do not abuse the registration service, impersonate another requester, submit an address you do not control, or use the hosted service to facilitate unauthorized access, fraud or unlawful collection of credentials. You remain responsible for securing your installation, configuring access and maintaining backups.

6. Connectivity, availability and expiry

Registration requires a current browser with JavaScript enabled, access to your mailbox and completion of the anti-bot check. Activation requires a compatible DarkPhish release and HTTPS access to the licensing API. Keep the installation clock accurate and install relevant security updates.

Initial activation requires an internet connection. Activated clients periodically request a signed validity update. The current implementation supports a validity period of up to 30 days followed by up to 30 days of offline grace, both bounded by the license expiry date. The timestamps in the issued signed record determine the actual period.

An outage does not immediately invalidate an existing signed record. Once its permitted period ends, the client restricts licensed operations, including new campaigns and delivery. We do not promise uninterrupted availability or a response-time guarantee for this free service.

License expiry and an offline grace period are different: grace never extends the license's overall expiry. Renewal is not automatic. Continued access after the license expires requires an administrator to renew it and the client to obtain a fresh signed update.

7. Suspension and ending service access

We may suspend further activation or validity updates to address service abuse, a material breach of these terms, a security incident or a legal obligation. You may contact license@darkphish.sk to request review or to end your service access (proposed licensing mailbox; setup pending before publication). Where practicable and lawful, we will explain the reason and any steps available to resolve it.

Revocation prevents new signed updates. A previously issued offline record may remain usable until its signed grace deadline; suspension and installation resets are not an immediate remote shutdown mechanism.

You can stop using the hosted service at any time. Ending service access does not itself delete data held by your own DarkPhish installation. Requests concerning personal information held by the licensing service are handled under the Licensing Privacy Notice.

8. Liability and mandatory rights

Back up your data and evaluate whether the service meets your operational needs. Nothing in these terms excludes liability that cannot lawfully be excluded or limits mandatory consumer or data-protection rights. The licence supplied with the open-source software governs its own warranty and liability provisions.

9. Changes and contact

These terms apply to the service version accepted during registration. We will identify revised terms with a new version and provide any notice or renewed acceptance required by applicable law. Changes to future offerings do not rewrite open-source rights or the cryptographic expiry timestamps of records already issued.

Slovak law applies subject to any mandatory protections available under applicable law. For questions or complaints, contact info@darkarmy.sk. This clause does not remove a consumer’s mandatory choice of forum or remedies.

10. Personal information

The separate Licensing Privacy Notice explains the registration and installation information processed, service providers, retention and your rights. Accepting these terms is not consent to marketing. The licensing API does not request campaign messages, recipient lists, captured credentials or campaign results.

Dark Army s. r. o. (planned) · Version 2026-09-16-draft.2 · Effective date: not set