Terms of Service

These terms are a contract between you — the person or organisation using Thorium — and Thorium Anti-Cheat Solutions LLC (“Thorium”, “we”). Creating an account, or using the dashboard, the API, the Discord bot or the plugin, means you accept them, together with the Privacy Policy and the AI Usage Policy.

If you accept on behalf of a company, a community or anyone else, you confirm you have the authority to bind them, and “you” means them as well as you.

Thorium is a tool for running game servers, and these terms are written for that business use. If the law where you live gives you rights as a consumer that a contract cannot take away, nothing here removes them.

Please read the section on disputes. Except as it describes, any dispute between us is resolved by binding individual arbitration, not in court, and you give up the right to a jury trial and to take part in a class action.

Thorium is a server-side anti-cheat for Minecraft. A plugin on your game server streams gameplay telemetry to our engine, the engine evaluates behavioural checks against it, and detections appear in your dashboard, in Discord and at any webhook you configure.

Thorium reports. It does not decide. Automatic kicks and bans are off until you switch them on, and then only happen at thresholds you set. What you do with a detection is your decision and your responsibility.

We change and improve the service continually: checks are added, retuned and retired, and features move between plans. We will not remove a feature you are paying for in the middle of a paid period without offering you a pro-rata refund for the rest of it.

This is the most important section in this document, so it is not buried at the bottom.

Thorium’s checks are probabilistic. Every detection carries a confidence score because no server-side check can be certain: network conditions, client modifications, server lag, unusual but legitimate play, and the limits of the data the server receives all produce ambiguity. A detection is evidence, not proof.

Thorium does not warrant that any detection is accurate, that any flagged player is cheating, or that any cheat will be detected. False positives and false negatives are inherent to behavioural detection and will occur.

You are solely responsible for any action you take against a player, including any action Thorium carries out automatically because you configured it to. If you ban someone on the strength of a detection, that is your decision, made with your own judgement and your own rules, and any dispute with that player is between you and them. We supply evidence recordings precisely so you can review a flag before acting on it; we recommend you do, and that you give players a way to appeal.

• You must be at least 16. If you are under 18, or under the age of majority where you live, a parent or guardian must agree to these terms for you.
• Give accurate registration details and keep them current. The email address on your account is where we send notices under these terms.
• You are responsible for everything done under your account, and for keeping passwords, API keys and plugin tokens secret. Turn on two-factor authentication.
• Tell us promptly at security@thorium.ac if you believe your account, a key or a token has been compromised.
• Members you invite to your organisation act with the permissions you grant them, and their actions bind the organisation. The organisation’s owners are the people we take instructions from.

• The Free plan reports detections but never kicks or bans on its own. Paid plans unlock enforcement and the other features listed on the pricing page.
• A trial gives you a paid plan’s features for the trial period shown when you start it. When it ends you move to the Free plan unless you subscribe.
• Each plan decides how far back you can view detections and replays. Detections and evidence recordings are deleted 120 days after they are made, on every plan; moving to a higher plan can reveal older history, but nothing is kept beyond that limit.
• Plans are sized by concurrent players. If a network stays well above its plan’s player limit, we will tell you first; if it carries on, we may withhold replays, live spectating and bot commands until you move to a plan that fits. Detections, alerts and webhooks keep running throughout.
• Where a plan lists something as unlimited, it is subject to fair use: usage far beyond what similar networks on that plan generate. If yours goes well past that, we will contact you first and may ask you to move to a plan that fits or apply a reasonable limit.
• We apply rate limits to the API, the plugin connection and the dashboard to keep the platform stable for everyone.

• Paid plans are billed in advance through PayNow, our payment provider. We never see your card details, and PayNow’s own terms apply to the payment itself.
• Subscriptions renew automatically for the same period until cancelled.
• You can cancel at any time from the dashboard. Access continues until the end of the period you have already paid for; apart from the refund window below, we do not pro-rate.
• We may change pricing with at least 30 days’ notice by email. The change takes effect at your next renewal, and you can cancel before then.
• Fees are exclusive of tax unless stated otherwise, and you are responsible for any tax that applies to your purchase.
• If a payment fails and is not resolved, we may move the organisation to the Free plan or suspend it.
• If you dispute a charge with your bank or card issuer instead of contacting us, we may suspend the organisation while the dispute is open. Talk to us first; it is quicker.

You can ask for a full refund within 7 days of any charge, whether it was your first payment or a renewal. Email billing@thorium.ac from an account owner’s address with the organisation name; we refund to the original payment method and end the paid plan.

After 7 days, refunds are not automatic. If the service did not do what we said it would, email us anyway and we will look at it honestly.

Do not:

• Use Thorium on a server you do not operate or have permission to operate.
• Feed the platform fabricated telemetry, or attempt to have it flag a player who is not doing what the telemetry claims.
• Resell, sublicense or white-label the service without a written agreement with us.
• Reverse engineer, decompile or extract the detection engine or its thresholds, except where the law allows it despite this term, or use the service to build a competing product.
• Use the service to develop, test or tune cheats or ways around detection.
• Create more than one account or unpaid network to get around plan limits or a suspension.
• Share an API key or plugin token outside your organisation, or use the service in a way that gets around its rate limits.
• Probe, scan or load-test our infrastructure without written permission. Responsible disclosure to security@thorium.ac is always welcome, and we will not pursue good-faith research that follows it.
• Use the service to harass a specific person, or to build a profile of someone for a purpose unrelated to moderating your server.
• Use the service in breach of any law, including data protection law and export controls, or from a country or for a person subject to sanctions that prohibit dealing with us.

Thorium processes data about the people on your server on your instruction. Under data protection law you are the controller of that data and we are your processor; the data processing terms in the next section govern how we handle it.

That means you must:

• Tell your players that an anti-cheat runs on your server, what it observes, and that a third party processes it on your behalf. Your server rules or privacy notice is the usual place; linking to our Privacy Policy helps but is not enough on its own.
• Have a lawful basis for that processing, including for any player who is a child.
• If you switch on automatic kicks or bans, make sure the law that applies to you allows decisions of that kind to be made automatically, and give players a way to reach a person to contest them.
• Handle player requests for access or deletion, and pass them to us where you need us to act.
• Keep your Thorium configuration — IP sharing, Advanced Analytics, alert channels, webhooks, role mentions — consistent with what you have told your players.
• Only send detections to Discord channels, webhooks or people who have a reason to see them. Where you send them is your responsibility.

For player data we process on your behalf, these terms are the data processing agreement between us required by Article 28 of the GDPR and the UK GDPR, and by equivalent laws. We will:

• Process it only to provide the service, on your documented instructions — these terms and your configuration — unless the law requires otherwise, in which case we will tell you first where the law allows. If we think an instruction breaks data protection law, we will tell you.
• Make sure everyone who can access it is bound to keep it confidential.
• Protect it with the measures described in the Privacy Policy, and keep them appropriate to the risk.
• Use only the sub-processors listed in the Privacy Policy, bind each of them to data protection terms at least as protective as these, and remain responsible for them. We will update that list, and its date, before adding one; if you object on reasonable data protection grounds, you may cancel and we will refund any period you have paid for and not used.
• Help you respond to players exercising their rights, and with security, breach notification and data protection impact assessments, as far as the information available to us allows.
• Tell you without undue delay after becoming aware of a personal data breach affecting your players’ data, with what we know and what we are doing about it.
• Delete the data when your organisation is deleted, as described under Suspension and termination, unless the law requires us to keep it.
• Give you the information you need to show that these obligations are met, answer reasonable written audit questions once a year or after a breach, and allow and contribute to any further audit or inspection that a supervisory authority requires, at your cost and on reasonable notice.
• Where the data is transferred from the UK, the EU or Switzerland to the United States, the Standard Contractual Clauses approved by the European Commission (Module Two, controller to processor), with the UK International Data Transfer Addendum and the Swiss adjustments where they apply, form part of these terms, with you as data exporter and us as data importer. If they conflict with these terms, they prevail.

The subject matter is anti-cheat and server moderation; the categories of data are set out in the Privacy Policy; the people it concerns are the players on your servers; and it lasts for as long as you use the service.

Fraud and abuse prevention across networks. To stop banned players and alternate accounts moving from one server to another, and to stop the service itself being abused, Thorium compares identifiers such as account UUIDs and connection IP addresses across the networks that use it. For that narrow purpose we act as an independent controller, not your processor, and the Privacy Policy explains it. By using Thorium you agree your players’ data may be used this way, and you should say so in what you tell your players.

We grant you a non-exclusive, non-transferable, revocable licence to install and run the Thorium plugin on servers you operate, and to use the API and the Discord bot, for as long as you have an account with us and follow these terms.

The platform, the detection engine, the plugin and the Thorium name remain ours. Telemetry from your server, and the detections derived from it, remain yours; you give us the rights we need to use them to provide the service and, in aggregate and non-identifying form, to measure and improve detection accuracy.

If you send us ideas or feedback, we may use them without owing you anything for it.

Discord, PayNow, Minecraft, your server software and anything you point a webhook at are run by other people under their own terms. We are not responsible for them, for their availability, or for what they do with data once you send it to them. Features that depend on them may stop working if they change how they operate.

Some features are marked beta, preview or early access. They are offered to get your feedback, may change or be withdrawn at any time, and come with no commitment beyond what the law requires.

We aim for continuous availability and we monitor the platform continuously, but we do not currently offer a contractual uptime guarantee. Maintenance, provider outages and faults will cause interruptions.

If your game server cannot reach Thorium, it keeps running — the plugin fails open. Your players are not kicked because our service is unavailable.

We are not responsible for failures caused by events outside our reasonable control, such as outages at our providers, attacks on the network, or natural disasters.

You can close your account at any time. We may suspend or terminate an account that breaches these terms, that does not pay, or whose use threatens the stability or security of the platform or other customers. Where the circumstances allow it, we will warn you first and give you a chance to put it right. Where we believe a network is being used to develop or test cheats, or to abuse the service, we may limit what it receives from the service without notice.

On termination your access ends and, 30 days after the organisation is deleted, its data is deleted: detections, replays, players, sessions and their IP addresses, reports, servers, members, API keys and the audit log. Two things are kept: billing records, which we must keep for tax, and the gameplay activity log, which from then on refers only to internal ids that no longer lead to a player. Copies in backups are overwritten as the backups roll over, within four weeks. Export anything you want to keep before then.

The sections on detections, data processing, disclaimers, liability, indemnity, disputes and the general terms continue to apply after the agreement ends.

The service is provided “as is” and “as available”. To the fullest extent the law allows, we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement, and we do not warrant that the service will be uninterrupted, secure or error-free, or that it will detect any particular cheat or cheating client.

To the fullest extent the law allows, we are not liable for indirect, incidental, special, punitive or consequential loss, for lost profits, revenue, data, players or goodwill, or for any action you take, or configure Thorium to take, against a player on the basis of a detection.

Our total liability for all claims arising out of or relating to these terms or the service is limited to the greater of the fees you paid us in the 12 months before the claim arose and US$100.

Nothing here excludes or limits liability that cannot lawfully be excluded or limited, including for death or personal injury caused by negligence, or for fraud.

You agree to defend and indemnify us against claims brought by third parties — including your players and data protection authorities — and the losses and reasonable costs that follow from them, where they arise from how you operate your server, how you use detections or automatic enforcement, what you tell or fail to tell your players, or your breach of these terms.

We may change these terms. For material changes we will email the address on your account at least 30 days before they take effect, and you can cancel before then with a refund of any period you have paid for and not used. Changes needed for legal or security reasons may take effect sooner. Continuing to use the service after a change takes effect means you accept it. The date at the top always reflects the current version.

Talk to us first. Before starting any claim, email support@thorium.ac describing it and what you want, and give us 30 days to try to resolve it informally. We will do the same for you, at the email address on your account.

Binding arbitration. If it is not resolved, any dispute, claim or controversy arising out of or relating to these terms or the service, including whether this section applies, will be resolved by final and binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, or its Consumer Arbitration Rules where those apply. A single arbitrator decides. The arbitration takes place online or by document submission unless the arbitrator decides a hearing in person is needed, in which case it is held in Delaware. Judgment on the award may be entered in any court with jurisdiction. The Federal Arbitration Act governs this section.

Individual claims only. Claims may be brought only in your or our individual capacity, not as a plaintiff or class member in any purported class, collective, consolidated or representative proceeding, and the arbitrator may not combine claims of more than one person. If this waiver is found unenforceable for a claim, that claim goes to court, not to class arbitration.

What stays out of arbitration. Either of us may bring an individual claim in small claims court if it qualifies, and either of us may ask a court for an injunction to stop misuse of the service or infringement of intellectual property.

Opting out. You can opt out of arbitration by emailing support@thorium.ac within 30 days of first accepting these terms, with your name, the email address on your account and a clear statement that you opt out. Opting out does not affect anything else in these terms.

Governing law and courts. These terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-law rules. Any claim that is not arbitrated goes to the state and federal courts in Delaware, which have exclusive jurisdiction. Where the law of the country you live in does not allow a consumer to agree to arbitration or to a foreign court in advance, this section applies only as far as that law allows.

• These terms, and the policies they refer to, are the whole agreement between us about the service and replace anything said before.
• If a court finds part of them unenforceable, the rest still applies, and that part is read as narrowly as needed to make it enforceable.
• Not enforcing a term straight away does not mean we have given it up.
• You may not transfer your account or these terms without our written consent. We may transfer them as part of a merger, acquisition or sale of the business, and will tell you if we do.
• Nothing here makes either of us the other’s partner, agent or employee, and no one else has rights under these terms.
• We send notices to the email address on your account. Send yours to support@thorium.ac.
• Thorium is not an official Minecraft product and is not approved by or associated with Mojang or Microsoft. Minecraft is a trademark of Mojang AB.

Thorium Anti-Cheat Solutions LLC — support@thorium.ac.