Sourcefolk

Plain-language terms

Terms of Service

These Terms govern your use of Sourcefolk. They explain the community rules, what happens to content you share, and the limits of private messaging and moderation.

Effective 12 July 2026 · Version 2026-07-12-sourcefolk

1. Operator and agreement

These Terms are an agreement between you and the legal operator named in the deployment notice above. You agree to these Terms by selecting “I have read and agree” and continuing. Sourcefolk records the Terms version, acceptance time, and the minimum-age threshold presented. Materially revised Terms must be reviewed and accepted before member features can be used again. A privacy notice explains data use and is not a request for blanket consent; see our Privacy Policy.

Sourcefolk is an independent community service. It is not affiliated with, sponsored by, or endorsed by Laravel Holdings Inc. Laravel is a trademark of Laravel Holdings Inc. References to Laravel describe the ecosystem the community discusses and do not claim any official relationship.

2. Eligibility and accounts

You must be at least 18 years old and legally capable of entering this agreement. Sourcefolk does not permit accounts for anyone under 18, including with parent or guardian permission. The current age control is a self-declaration, not verified age assurance, and does not collect your date of birth.

GitHub is the primary sign-in provider. You must keep your GitHub account secure and provide accurate account information. We do not receive your GitHub password. You are responsible for activity under your account until you tell us it has been compromised.

3. Public community features

Profiles, names, usernames, biographies, profile photos, follower and following relationships, public posts, projects, replies, reactions, and reposts are designed to be visible to other people and may be indexed or shared outside Sourcefolk. Bookmarks and direct messages are not public features.

4. Your content and our limited licence

You keep ownership of content you submit. You give the operator a non-exclusive, worldwide, royalty-free licence to host, store, reproduce, format, and display it only as needed to operate, secure, and present the service, including ordinary previews and links to public posts. Processors acting for the operator may perform those limited tasks.

The licence ends when content is deleted, except for temporary backups, copies already shared with or retained for another participant, and limited records reasonably required for safety, legal compliance, dispute resolution, or enforcement. You confirm that you have the rights and permissions needed to share your content.

5. Direct messages

A member may start a direct-message conversation only with someone who follows that member. Participants may then reply in that conversation. Do not use messages for unsolicited marketing, harassment, threats, fraud, or attempts to evade a block or account restriction.

Encryption boundary: message bodies are encrypted in transit and while stored, but they are not end-to-end encrypted. The service manages the encryption keys and can decrypt a message to deliver it to an authorized participant. Vask real-time events carry conversation, message, sender, and timestamp identifiers—not decrypted message bodies. An authorized participant fetches the body over HTTPS.

Messages do not disappear and there is currently no per-message delete-for-everyone feature. While both accounts remain, history stays visible to both participants even if the follow relationship ends. Deleting either participant's account removes the live conversation history from the primary database; backups and limited safety or legal records follow the configured retention schedule. Administrators have no general ability to browse conversations. When a participant reports a conversation, the selected messages and related identifiers are provided to authorized safety staff for review.

6. Acceptable use

You must not use the service to:

  • break the law or encourage illegal activity;
  • threaten, harass, stalk, exploit, or target people with hateful abuse;
  • impersonate others or misrepresent affiliation;
  • publish private information, credentials, or precise location without permission;
  • share child sexual abuse material or sexually exploit a minor;
  • share non-consensual intimate imagery, including manipulated or AI-generated depictions;
  • infringe intellectual-property, privacy, publicity, or other rights;
  • send spam, scams, malware, or deceptive links;
  • interfere with security, scrape restricted areas, or bypass access controls; or
  • evade moderation, blocks, rate limits, or account restrictions.

7. Moderation, reports, and reasons

Authorized administrators may review public content and submitted reports. Current automated systems support spam prevention, rate limiting, security, and source curation; they do not proactively read direct-message bodies or make final legal-content decisions. Depending on context, the operator may label, reduce distribution of, remove, or preserve content; warn or restrict an account; or suspend or terminate access.

Decisions should be timely, diligent, objective, and proportionate. Before serving EU recipients, the moderation workflow must give affected people the reasons, automation disclosure, duration and scope, and review or appeal options required by law. Significant changes to moderation rules must be notified before they take effect.

8. Illegal content and intimate-image requests

Anyone may report specific allegedly illegal content through the content request form. Give the exact location or message identifiers, the reason it is unlawful, and accurate contact information. Reports are assessed under applicable law and these Terms. Before serving EU recipients, the workflow must provide the receipt, outcome notice, and redress information required by law.

The same route accepts requests concerning real or digitally altered intimate images shared without consent. Do not re-upload the image with your report. Where the US TAKE IT DOWN Act applies, a valid request requires removal of the reported depiction and known identical copies within 48 hours. The operator must maintain the workflow needed to meet that deadline before public launch.

9. Suspension and account closure

You may stop using the service and request account deletion. The operator may restrict or end access for serious or repeated violations, legal requirements, material security risk, or prolonged unavailability. Where permitted, notice and a chance to seek review are provided. Account closure does not erase obligations or records that lawfully need to survive.

10. Third-party services

GitHub provides sign-in, Cloudflare R2 stores uploaded media, and Vask provides real-time delivery events. Those providers may apply their own terms to their services. Links and user content may lead to third-party sites that the operator does not control or endorse.

11. Service changes and availability

The service may change as features and legal requirements develop. Material changes to these Terms will be presented clearly and require acceptance of a new version before member features can be used. The service is provided on an “as available” basis; no promise is made that it will always be uninterrupted, error-free, or suitable for every purpose.

12. Responsibility and liability

Users are responsible for their content and conduct. To the fullest extent applicable law permits, the operator is not responsible for user content or indirect losses that were not reasonably foreseeable. Nothing in these Terms excludes mandatory consumer rights or liability that cannot legally be excluded or limited, including liability for fraud or deliberate wrongdoing. No monetary liability cap is stated until the operator and governing jurisdiction are configured and reviewed.

13. Governing rules and contact

Mandatory protections and courts available to consumers where they live are not displaced by these Terms. The operator's governing-law and forum clause must be completed after its legal identity and country are configured.

Operator
Not configured
Postal address
Not configured
Legal contact
Not configured