1. Service Provider
- The operator and service provider of the Sinlege platform is Krzysztof Mańczak, Gumna 2a, 64-420 Kwilcz, Poland, conducting unregistered business activity (nierejestrowana działalność gospodarcza) within the meaning of Article 5 of the Act of 6 March 2018 - Entrepreneurs' Law (Prawo przedsiębiorców), trading as Sinlege. The operator is not registered in CEIDG and does not hold a NIP or REGON number in connection with this activity.
- The service is operated under the name Sinlege and is available at sinlege.com.
- General contact: [email protected].
- Phone contact: +48 720 370 960.
- As a person conducting unregistered business activity, Sinlege does not issue VAT invoices. Upon the Customer's substantiated request, a receipt (rachunek) may be issued in accordance with Article 87 of the Tax Ordinance Act. Identifying data of the operator are made available only where required by applicable law (for example for issuing a receipt or responding to a competent authority).
- Sinlege may change the form of its business activity (for example from unregistered activity to a registered business or another lawful form) and the way sales are documented (for example receipts, invoices, or other documents required by tax or consumer law). Customers will be informed of material changes affecting documentation of sales through the Service or by email where reasonably practicable. Until such a change takes effect, the documentation rules stated in these Terms apply.
- Sinlege is not a bank, payment institution, or e-money institution within the meaning of Polish payment services law. Card and BLIK payments are processed by Stripe (or another indicated payment operator). The Wallet is a closed internal prepaid balance used only to pay for Sinlege services within the Service; it is not a payment account, does not support cash withdrawals or peer-to-peer transfers, and does not constitute a payment service for third parties, unless mandatory law states otherwise.
- These Terms constitute the terms of providing electronic services within the meaning of applicable Polish law, including the Act of 18 July 2002 on Providing Services by Electronic Means.
2. Definitions
- Service means the Sinlege website, customer panel, wallet system, APIs, and related pages and systems.
- User means any natural person who browses or uses the Service.
- Customer means a person who holds an Account and may top up the Wallet or purchase paid services. A Customer may be: (a) a natural person acting as a Consumer; or (b) a natural person acting as an entrepreneur (including a sole proprietor / jednoosobowa działalność gospodarcza), including an Entrepreneur on Consumer Rights where the statutory conditions are met. Legal persons and organisational units without legal personality are not offered Accounts at this stage unless Sinlege expressly enables them in the panel.
- Account means the individual user account within the Service. Only natural persons who are at least 18 years of age may create or hold an Account.
- Wallet means the closed internal balance assigned to a Customer Account, usable exclusively to pay for services offered by Sinlege within the Service. The Wallet does not allow withdrawals to external accounts, transfers between Users, or use as a general payment instrument.
- Top-up means adding funds to the Wallet through a supported payment method for later use exclusively within the Service.
- Services means VPS hosting, game hosting (e.g. Minecraft via Pterodactyl), Discord bot hosting (e.g. Node.js or Python runtimes), IP Transit where offered, optional network or anti-abuse features where offered, and any related digital services made available through Sinlege as described in the panel at the time of order.
- Consumer means a Customer who qualifies as a consumer under applicable Polish law.
- Entrepreneur on Consumer Rights (przedsiębiorca na prawach konsumenta) means a natural person who concludes a contract directly related to their business activity (e.g. a sole proprietor / jednoosobowa działalność gospodarcza) where, in light in particular of the subject of that business activity, the contract is not of a professional character for that person. Such a person is granted certain consumer protections under Article 7aa of the Act of 30 May 2014 on Consumer Rights and Articles 3855, 5564, and 5565 of the Civil Code, as set out in section 8.
- Illegal Content means any information, data, files, software, or other content that is unlawful under applicable law.
- Payment Link means a unique, system-generated URL in the form sinlege.com/pay/<id> created by a Customer for a specific top-up amount and valid for a single successful payment by another person. Payment Links exist only to credit a recipient Customer's closed Sinlege Wallet for use of Sinlege services; they are not a payment institution product, money remittance, or peer-to-peer payment service.
- Payer means a natural person who pays through a Payment Link to credit another Customer's Wallet, without necessarily holding a Sinlege Account.
- Third-party wallet top-up means a one-off payment by a Payer for immediate crediting of a specified amount to a recipient Customer's Wallet via a Payment Link, processed by the payment operator on Sinlege's instructions. It is solely a top-up of a closed Wallet for Sinlege services, not a charitable donation, gift, crowdfunding product, or transferable funds product offered by Sinlege.
- Payment operator means Stripe Payments Europe, Ltd. or another entity indicated at checkout, which processes card and BLIK payments on its own terms.
- API means the public Sinlege programming interface (e.g. /api/v1/...) accessed using an API Key issued in the customer panel.
- API Key means a secret Bearer token issued to a Customer for programmatic access to the Sinlege API; only its SHA-512 hash is stored by Sinlege.
- Sinbox means the optional inbound-only email service described in section 29, providing a Customer with a dedicated address at the @sinlege.eu domain for receiving verification codes and similar text messages through the customer panel.
- SinlegePass means the optional captcha-as-a-service add-on described in section 18, providing hosted captcha verification for third-party websites.
- SinlegeLicense means the optional license key management service described in section 19, allowing account holders to create, manage, and validate license keys for their own software.
- Sinlege2FA means the free encrypted TOTP authenticator service described in section 20, allowing account holders to store TOTP secrets in an AES-256-GCM encrypted vault and generate time-based one-time passwords.
- SinlegeLicense API Key means a secret management token (prefixed
sinlege_priv_) issued to a Customer for programmatic management of their SinlegeLicense keys; only its SHA-256 hash is stored by Sinlege. - HWID (Hardware Identifier) means an opaque string provided by an end-user application to the SinlegeLicense validation endpoint, used to bind a license key to a specific device.
- Quests means optional tasks offered in the customer panel that, when completed according to the stated tracker rules and successfully claimed, credit a stated one-time amount to the Customer's Wallet. Quest types may include account tasks, Discord community activity, site easter eggs, service resource metrics, and other conditions shown in the panel.
- Review means optional customer feedback submitted through the Reviews section of the panel; published reviews may be moderated by Sinlege.
- Radio means the optional Sinlege Radio streaming feature in the customer panel where access is granted by Sinlege.
- Shop means the catalogue in the customer panel from which the Customer may order available plans and products (including VPS, game/bot hosting where offered, and entries that redirect to other panel sections such as IP Transit).
- Support means customer assistance channels offered in the panel (including ticket-based support) and any Discord-based tickets where offered.
- Priority Support means an optional paid add-on (where offered in the Shop) under which the Customer's Support tickets are handled with higher priority in the staff queue so that they are reviewed and answered faster than ordinary tickets, and under which the Customer receives a six-digit Support PIN that allows the Customer to obtain assistance by telephone conversation with Sinlege support, subject to availability and the rules in section 28.
- Status means the public or panel status monitoring information describing Service availability and incidents, which is informative and does not by itself create an SLA.
- Referral Program means optional referral link tracking and any related rewards or statistics shown in the panel where enabled by Sinlege.
- Translations means the optional panel tool for invited translators to propose localisation string changes for Sinlege review and approval.
- IP Transit means the optional product described in section 27: assignment of one or more public IPv4 addresses from Sinlege's address pool, delivered to the Customer over a WireGuard tunnel, together with separately purchased traffic (data transfer) credits, and - where offered at the time - a complimentary companion IPv6 address as described in section 27.
- Transit IP means a public IPv4 address assigned to a Customer under IP Transit for a stated billing period (typically 30 days from purchase or renewal). Where a complimentary companion IPv6 is offered with that assignment, references to lawful use of assigned addresses include that IPv6 for the same term, subject to section 27.
- Traffic credit means a quantity of transferable data (e.g. measured in terabytes) purchased for IP Transit, which expires a stated period after purchase (typically 30 days) and is consumed on a first-to-expire basis.
3. Scope of the Service
- Sinlege provides an online customer panel with, as shown at the time of use: Wallet top-ups in PLN; Shop and Servers (VPS KVM on shared infrastructure, game and application hosting where offered, Game Panel access where offered); IP Transit (routed public IPv4 over WireGuard with metered traffic credits) where offered; Sinbox (inbound-only disposable email at @sinlege.eu) where offered; Support tickets and optional Priority Support where offered; Status information; Reviews; Quests; Radio where offered; Translations for invited translators; third-party wallet top-ups via Payment Links; programmatic access through the public Sinlege API (including Payment Link management); OAuth 2.0 / OpenID Connect identity provider for authorised third-party applications; SinlegePass (captcha-as-a-service); SinlegeLicense (license key management); Sinlege2FA (encrypted TOTP authenticator); account Settings (including security and notification preferences); and Referral Program tracking where enabled. Optional other network or anti-abuse features may be available where indicated.
- Who may be a Customer. The Service is currently available exclusively and temporarily to Customers who (a) are natural persons at least 18 years of age, and (b) reside in Poland or, where acting as an entrepreneur, are established in Poland for the purposes of the contract. Registration and use of Accounts by persons who do not meet these conditions, or who are located outside Poland, is not supported at this stage. This geographic restriction is temporary; Sinlege will publish an advance notice in the Service when access is extended to other countries. Age and Account eligibility are further set out in section 5.
- The availability, technical parameters, duration, pricing, billing cycle, and scope of individual services are shown in the customer panel or order flow before purchase.
- Shared infrastructure. Unless a specific offer expressly designates a resource as dedicated, the Services are provided on shared infrastructure. Physical servers and host nodes, processors and CPU cores, memory (RAM), storage and disk I/O, network bandwidth and uplinks, IP address pools, and other underlying resources are shared among multiple Customers on the same physical or virtual host. The Customer acknowledges and accepts that resources are not exclusively reserved for the Customer except where a plan is explicitly described as "dedicated".
- Nature of advertised resources. Resource figures shown for a plan (e.g. vCPU, RAM, disk space, bandwidth, or verification/key quotas) represent maximum, allocated, or burstable limits within a shared environment. They reflect the upper bound the Customer may use and do not constitute a guarantee of continuously available, dedicated, or peak capacity. Actual available performance at any given moment depends on the overall load on the shared host node and the activity of other Customers.
- vCPU / vCore are virtual units. A "vCPU", "vCore", or "core" stated for a plan is a virtual processing unit and does not correspond to one dedicated physical CPU core or hardware thread. Physical CPU cores and threads of the host node are shared and time-scheduled (oversubscribed) among multiple virtual machines, and a single physical core or thread may serve several Customers. One vCPU therefore does not guarantee the performance, clock speed, or exclusive availability of a full physical core or thread; the processing capacity actually delivered to a vCPU varies with the host node's total load. This applies unless a plan is expressly described as offering dedicated or pinned physical cores.
- Noisy-neighbour and CPU steal. In a shared, oversubscribed environment the activity of other Customers on the same host node may cause CPU steal time, I/O wait, and memory or network contention ("noisy-neighbour" effects) that temporarily reduce the performance available to the Customer. Overcommitment may apply not only to CPU but also, where indicated, to memory, storage I/O, and network capacity. Customer environments are logically separated using virtualization, but isolation in a shared environment is not absolute, and Sinlege does not warrant against side-channel or hypervisor-level effects beyond its reasonable control. Such effects are inherent to shared virtualization and do not constitute a defect or improper performance of the contract.
- Fair use. Because resources are shared, every Customer must use the Services in a manner that does not disproportionately or persistently degrade the experience of other Customers on the same infrastructure. Sinlege may apply fair-use limits, rate limits, throttling, or temporary suspension to protect the stability and fair allocation of shared resources, as further described in section 11. Resource-allocation, fair-use, and abuse-mitigation measures applied to maintain shared infrastructure stability do not constitute improper performance of the contract.
- No uptime or availability guarantee. Unless a specific written Service Level Agreement (SLA) is expressly agreed for a particular plan, the Services are provided on a commercially reasonable, "as-available" basis and Sinlege does not guarantee any uptime, continuous availability, or specific level of performance. Availability may be affected by scheduled or emergency maintenance, host-node or upstream provider failures, network conditions, security incidents, denial-of-service attacks, and other factors. No advertised percentage, estimate, or historical availability figure constitutes a binding uptime commitment, and Sinlege does not provide service credits unless an applicable SLA expressly states otherwise. This clause does not limit any non-waivable statutory rights of Consumers.
- Sinlege may add, modify, suspend, or withdraw particular service plans, features, or payment methods, provided that this does not affect already acquired rights unless required by law or justified by security, technical, or legal reasons.
4. Technical Requirements
- To use the Service, the User needs a device with Internet access, an up-to-date web browser, a valid email address, and support for cookies and JavaScript where necessary for authentication, payments, and service operation.
- Some security features may additionally require a banking application or a card issuer authorization process.
- The User is responsible for maintaining their own equipment, Internet connection, and access to electricity.
5. Account Registration, Verification, and Security
- Registration. Creating an Account requires a valid email address, a password of 10-128 characters without spaces that meets the complexity rules shown at registration (as a rule at least one uppercase letter, one lowercase letter, and one digit), and successful completion of the SinlegePass security verification. Registration is subject to technical rate limits for abuse prevention (as a rule, up to three registration attempts per IP address per ten minutes, with temporary blocking after excess attempts).
- Account setup. Before using paid features and certain security options, the User must verify their email address using a time-limited verification link sent to the registered email (as a rule valid for ten minutes), provide accurate first and last name, and select the account currency. At present only PLN is available. Resending a verification email is subject to a cooldown period (as a rule ten minutes).
- Age and eligibility. Only natural persons who are at least 18 years of age may create or hold an Account. By creating an Account, the User confirms that they are at least 18 years old, have full legal capacity to conclude these Terms, and meet the Customer eligibility rules in section 3 (including residence or establishment in Poland). Persons under 18 may not register an Account, even with parental or guardian consent. Sinlege may refuse, suspend, or delete Accounts that do not meet these conditions.
- Truthfulness and prohibition on third-party data. All information provided during registration, account setup, payments, and support must be truthful, accurate, and kept up to date. The User may not register or maintain an Account using another natural person's email address, name, telephone number, payment details, or other personal data without that person's express authorisation. The User may not impersonate any person, provide fabricated identity data, register accounts in bulk, or create Accounts for automated, deceptive, or unlawful purposes. Sinlege may refuse registration, suspend, or permanently delete Accounts established or used in breach of this rule and may cooperate with competent authorities where required by law.
- Credential confidentiality. The User must keep login credentials, backup codes, API keys, and two-factor authentication devices confidential and must not share access to the Account with unauthorised persons. The User is responsible for all actions performed through the Account unless they prove that the action resulted solely from unauthorised access not caused by their fault.
- Security measures. The Service may require email verification, name completion, wallet currency selection, SinlegePass captcha verification, and enabling or using additional security measures such as two-factor authentication (2FA). Optional Discord account linking may be offered; linking is voluntary and subject to Discord's own terms.
- Two-factor authentication. The Service supports optional 2FA by authenticator application (TOTP), email one-time password (OTP), and/or WebAuthn/passkeys where offered in the panel. Only one primary 2FA method may be active at a time where the panel so indicates; enabling a new method may disable the previous one. When 2FA is enabled, a set of single-use backup codes may be generated. Backup codes may be viewed or rotated only after re-authentication (password and SinlegePass captcha where required). Login OTP codes (email) and TOTP codes are time-limited (as a rule five minutes for OTP; TOTP per standard timing). Failed OTP attempts are limited (as a rule five attempts per login session).
- Sessions. Authenticated sessions are maintained using secure session mechanisms (as a rule up to ninety (90) days unless terminated earlier by the User or Sinlege). The User may review active sessions and revoke them from the account settings.
- Notification preferences. The account settings allow the User to choose, per event type, which email notifications they wish to receive - for example service renewal, suspension, or deletion notices, wallet top-up confirmations, plan upgrade confirmations, and account security events. These preferences control optional notifications only; they do not affect Sinlege's ability to send communications that are necessary for the performance of the contract, for security purposes, or that Sinlege is required to send by law, regardless of the User's notification settings.
- Identity verification. In specific cases - for example to prevent or investigate fraud, to resolve a payment dispute or chargeback, to protect the security of the Account or infrastructure, or to comply with a legal obligation - Sinlege may ask the User to complete an identity verification by following a verification link. The verification is carried out by Stripe Identity, which asks for a government-issued identity document and, where applicable, a selfie, processed by Stripe under its own terms. Sinlege receives and stores, in encrypted form, only the verified outputs of the check (such as document type, number, expiry, date of birth, name, and address) as described in the Privacy Policy. Identity verification is not part of standard registration and is requested only where reasonably necessary. Where a User does not complete a reasonably requested identity verification, Sinlege may withhold, restrict, or suspend the relevant service or transaction under section 11, without limiting any non-waivable statutory rights of Consumers.
- If the User suspects unauthorised access, they must immediately change their password, review active sessions, consider rotating backup codes, and contact Sinlege at [email protected].
6. Wallet and Top-ups
- The Wallet is a closed internal balance used exclusively to pay for services offered by Sinlege through the Service. It is not a bank account, payment account, e-money, or a means of transferring value between Users. Wallet funds cannot be withdrawn to an external account, transferred to another User, cashed out, or used as a general payment instrument outside Sinlege services, except where mandatory law requires a refund or where a complaint is accepted.
- Wallet top-ups are processed through Stripe-supported payment methods, including payment cards and BLIK, if available at the time of payment. Sinlege does not provide payment services to third parties; the payment operator processes the top-up payment on Sinlege's instructions so that the Customer's closed Wallet can be credited for Sinlege services only.
- The amount to be paid, currency, and payment method are presented before the Customer confirms the transaction. Third-party payment fees, if any, are shown where applicable.
- Funds are credited only after successful confirmation by the payment operator and internal verification by the Service.
- Wallet funds are non-interest-bearing. There is no free withdrawal or cash-out channel to the Customer, except where mandatory law requires a refund or where a complaint is accepted.
- If a payment is reversed, disputed, fraudulent, unauthorized, or otherwise invalid, Sinlege may deduct the corresponding amount, suspend access to services, or block the Account until the matter is resolved, without limiting non-waivable Consumer rights.
- Disputes and chargebacks. If a payment problem arises, Customers - including Consumers - are encouraged to contact Sinlege first at [email protected] so that the matter can often be resolved quickly without a formal payment dispute. This encouragement does not limit, waive, or condition any statutory rights of Consumers, including any right to dispute an unauthorised or incorrectly executed transaction with their bank or card issuer. Where a chargeback or payment dispute is raised in respect of a service that was duly provided, or is otherwise manifestly unjustified, and where permitted by mandatory law, Sinlege may take proportionate measures such as suspending the Account, recovering the disputed amount together with related fees charged by the payment operator from the Wallet or otherwise, and refusing further service. Towards Consumers, such measures may not go beyond what mandatory consumer law allows.
- Before initiating a wallet top-up payment, the Customer must actively confirm in the Service interface (for example by an unticked checkbox that the Customer must select) that: (i) they expressly request immediate performance of the top-up service in full after successful payment; (ii) they have been informed that once the Wallet is credited they lose the statutory 14-day right of withdrawal in respect of that performance, to the extent permitted by Article 38 point 1 of the Act of 30 May 2014 on Consumer Rights; and (iii) they understand that providing accurate first and last name is mandatory where requested. After conclusion of the contract, Sinlege provides the Consumer with confirmation of the contract on a durable medium (for example by email and/or a downloadable receipt or panel transaction history), in accordance with Article 21 of the Act on Consumer Rights.
- Wallet funds may only be used to purchase services offered through Sinlege. Sinlege does not guarantee any particular exchange rate, investment return, or cash withdrawal channel except where mandatory law requires a refund.
7. Orders, Service Activation, and Billing
- An order is placed when the Customer confirms the purchase or top-up in the Service interface (including the Shop or a dedicated panel section such as IP Transit) and, where required, completes payment successfully from the Wallet or via the payment operator.
- Paid services are activated without undue delay after payment confirmation, unless a different activation time is stated for a particular service.
- Recurring or time-limited services must be renewed before expiry if the Customer wishes to keep them active. Billing cycles (e.g. 30 days) and any grace period (e.g. for renewal) are shown in the panel.
- If a service expires or remains unpaid after any stated grace period, Sinlege may suspend or permanently delete the service and related data.
- Discontinued plans. Where Sinlege withdraws a particular service plan from sale under section 3, a Customer already subscribed to that plan may generally continue renewing it for as long as the panel indicates it remains renewable. Once a plan is marked as no longer renewable in the panel, the Customer may not renew a service on that plan and, before expiry, must migrate to a currently offered plan (including via the plan upgrade feature described below) or the service will expire and be handled under this section and section 11.
- Plan upgrades. For active VPS and Minecraft services, the Customer may request an upgrade to a specific higher-priced plan of the same service type directly from the panel. Only upgrades to a plan with a higher price than the Customer's current plan are permitted; the feature does not support downgrades or lateral plan changes. Upon confirmation, the price difference between the current and the new plan is charged immediately from the Wallet, and the service's CPU, RAM, and disk allocation are resized on the live virtual machine or game server accordingly. An upgrade request is subject to available server capacity (in particular RAM headroom on the relevant host) at the time of the request and may be temporarily unavailable or rejected if sufficient capacity is not available; in that case no charge is made. A short cooldown period applies between successive plan-change requests for the same service. If the price is charged but the underlying resize fails for technical reasons, Sinlege will remedy the issue upon contact at [email protected].
- Custom plans. Sinlege may, at its discretion, make a bespoke plan with individually agreed specifications and pricing available to a specific Customer. A custom plan is not listed in the public shop, is intended only for the Customer to whom it was made available, and may be subject to a purchase quantity limit set by Sinlege. Except as to its individually agreed price and specifications, a custom plan is subject to these Terms in the same way as a standard published plan, including as regards renewability and shared-infrastructure disclosures.
- Discount codes and promotions. Sinlege may offer discount codes or site-wide promotional price reductions for selected services or plans, subject to conditions shown at the time of the offer (such as validity period, eligible plans or categories, usage limits, and whether the discount applies to renewals or only to the first purchase). Discounts and promotions may be withdrawn, modified, or discontinued by Sinlege at any time with effect for future orders, without affecting orders already placed.
- Order and capacity limits. Placing an order does not guarantee that the requested plan will be provisioned. Because the Services run on shared infrastructure with finite host capacity (see section 3), a plan may become temporarily unavailable for new orders, or an order in progress may be declined, where sufficient server capacity (in particular RAM) is not available at the time of the request. Where an order is declined for this reason, no charge is made or any charge already taken is reversed.
- The Customer is solely responsible for keeping backups of their own data unless a specific paid backup feature expressly states otherwise.
- Sales confirmations and other documents are issued in accordance with applicable Polish tax and consumer law. As a person conducting unregistered business activity, Sinlege issues receipts (rachunki) upon request pursuant to Article 87 of the Tax Ordinance Act, rather than VAT invoices, unless and until Sinlege changes its form of activity or documentation method under section 1. Receipts may be requested by contacting [email protected]. Confirmation of distance contracts and of Consumer consents relating to immediate performance of digital services or digital content is provided on a durable medium as described in section 8.
8. Consumer Information and Right of Withdrawal
- Consumers (natural persons concluding a contract for purposes not related to business activity) have the rights granted under Polish consumer law, in particular the Act of 30 May 2014 on Consumer Rights and the Civil Code.
- Before concluding a distance contract, the Consumer receives, in the order flow or on linked pages, information on the main characteristics of the service, total price including taxes where applicable, payment method, performance period (for digital services: usually immediate after payment), complaint procedure, and these Terms.
- 14-day withdrawal right. Unless an exclusion under Article 38 of the Act on Consumer Rights applies, the Consumer may withdraw from a distance contract within 14 days without giving reasons, by sending an unequivocal statement to [email protected] (see also Consumer information). The period runs from the day of concluding the contract (Article 27 and Article 28 of the Act on Consumer Rights).
- Active consent for immediate digital performance. Where Sinlege offers immediate activation of a digital service or supply of digital content not supplied on a tangible medium, the Consumer must give an express prior consent in the Service interface (for example by actively selecting an unticked confirmation) that: (a) they request that performance begin before the end of the 14-day withdrawal period; and (b) they acknowledge that they thereby lose the right of withdrawal once performance has begun, to the extent permitted by Article 38 of the Act on Consumer Rights. Sinlege will not begin such performance for Consumers until those confirmations are given where the exclusion is to apply.
- Exclusion for digital content and digital services. Pursuant to Article 38 of the Act on Consumer Rights - in particular point 1 (contracts for the supply of services where the trader has fully performed the service with the Consumer's express prior consent and after informing the Consumer that the right of withdrawal will be lost) and point 13 (contracts for the supply of digital content not supplied on a tangible medium where performance has begun with the Consumer's express prior consent and after the Consumer has been informed that the right of withdrawal will be lost) - the right of withdrawal does not apply where the statutory conditions are met. This applies in particular to: (a) wallet top-ups (including third-party wallet top-ups) once funds have been credited after successful payment and the required confirmations have been given; (b) hosting and related digital services purchased from the Shop or panel (including VPS, game/bot hosting, plan upgrades, SinlegePass, SinlegeLicense, and Sinbox) once the Wallet has been debited and provisioning or activation has begun after the required confirmations; and (c) IP Transit purchases (Transit IPs and Traffic credits) once the Wallet has been debited and the service activated in the panel after the required confirmations. Where performance of a service has begun with the Consumer's request but the exclusion under Article 38 does not fully apply, the Consumer's payment obligation for the period until withdrawal may be adjusted in accordance with Article 35 of the Act on Consumer Rights.
- Confirmation on a durable medium. After conclusion of a distance contract with a Consumer, Sinlege provides confirmation of the contract on a durable medium - for example by email and/or a downloadable receipt or panel transaction history - including the main terms and, where applicable, a record of the Consumer's confirmations relating to immediate performance and loss of the withdrawal right, in accordance with Article 21 of the Act on Consumer Rights.
- If withdrawal is valid and not excluded, Sinlege will reimburse payments received from the Consumer using the same payment method unless the Consumer expressly agrees otherwise; reimbursement is made without undue delay and no later than 14 days from receipt of the withdrawal statement, subject to any withholding permitted by law (Articles 32-35 of the Act on Consumer Rights).
- Practical consumer information (including supervisory bodies and available out-of-court dispute options in Poland) is summarised on the Consumer information page.
- Nothing in these Terms limits non-waivable consumer rights. Entrepreneurs (B2B Customers) are not Consumers unless mandatory law provides otherwise.
- Entrepreneurs on consumer rights. A Customer who is an Entrepreneur on Consumer Rights (a natural person running a sole proprietorship who concludes a contract directly related to their business but lacking a professional character for them) benefits, by force of Article 7aa of the Act on Consumer Rights and Articles 3855, 5564, and 5565 of the Civil Code, from the provisions of these Terms concerning: the prohibition of unfair (abusive) contract terms, the statutory right of withdrawal from a distance contract (subject to the same exclusions that apply to Consumers, including for digital content or services performed on request), and the statutory warranty for defects. To that extent, and only to that extent, references in these Terms to "Consumer" protections apply to such a Customer, and clauses expressed to apply to Customers who are "not Consumers" (B2B) - including limitations of liability and indemnification - do not limit those protections. In all other respects such a Customer is treated as a non-Consumer entrepreneur.
9. User Content and Hosted Data
- The Customer may use purchased services to upload, store, process, or make available their own data, software, and content, subject to these Terms and applicable law.
- The Customer remains solely responsible for all content, software, configurations, traffic, and activities carried out using their services.
- Sinlege does not acquire ownership of Customer content.
- The Customer must ensure that all uploaded or hosted content is lawful and that they have sufficient rights to use, store, and make it available.
- Sinlege does not perform general monitoring of Customer content, but may act when it becomes aware of unlawful content, abuse, or security threats.
10. Prohibited Uses
- The User may not use the Service or purchased hosting services in any unlawful manner or in a way that threatens the stability, security, or reputation of Sinlege or third parties.
- The User may not provide false, misleading, or third-party personal data in registration, account setup, payments, Payment Links, support requests, or any other interaction with the Service, or use the Service to process personal data of third parties without a lawful basis and, where required, their consent.
- In particular, the following are prohibited:
hosting, distributing, or processing illegal content, malware, phishing pages, scam content, stolen data, or infringing content;
sending spam, mass unsolicited communications, or unauthorized SMTP traffic;
port scanning, vulnerability scanning, unauthorized penetration testing, brute-force attacks, spoofing, denial-of-service attacks, or maintaining services intended to facilitate such conduct;
using the services as an open public proxy, unauthorized VPN endpoint, or bulk traffic relay without prior written approval;
cryptocurrency mining or similar excessive resource-intensive workloads not expressly permitted by the purchased offer;
activities causing disproportionate or long-term excessive use of CPU, RAM, disk, or network capacity affecting other customers or infrastructure stability;
sustained excessive outbound traffic that may harm the host network, where automated limits or suspension may apply as described in the panel;
abuse of registration, login, captcha, API, or payment interfaces through automation, credential stuffing, or evasion of technical limits;
using offensive, unlawful, or misleading names, descriptions, subdomains, or published content.
- The User may not provide unlawful content through the Service.
- The User bears full civil and, where applicable, criminal responsibility for prohibited conduct and for any damage caused to Sinlege, other Users, or third parties as a result of such conduct.
11. Suspension, Restriction, and Termination
- Sinlege may temporarily restrict, suspend, or disable an Account, Wallet, purchased service, or API access if this is necessary for security, fraud prevention, legal compliance, technical maintenance, payment verification, or enforcement of these Terms.
- Sinlege may immediately block access where necessary to prevent harm, protect infrastructure, respond to attacks, or comply with legal obligations.
- Attack and abuse mitigation. Where an Account, service, or IP address is the source or target of a denial-of-service (DoS/DDoS) attack, traffic flood, or other activity that threatens the stability or security of the shared infrastructure or other Customers, Sinlege may apply mitigation measures including traffic filtering, rate limiting, temporary null-routing or "blackholing" of the affected IP address, or suspension of the affected service, without prior notice where necessary. Sinlege is not liable for unavailability or degraded performance resulting from such attacks or from proportionate mitigation measures taken in good faith. A Customer whose own conduct, content, or configuration attracts, causes, or facilitates such attacks may be suspended or terminated under this section.
- No guaranteed DDoS protection. Unless the Customer has purchased a specific protection plan or add-on that expressly states otherwise, Sinlege provides no guaranteed DDoS protection, mitigation capacity, or absorption threshold. Any best-effort mitigation taken under this section does not constitute a guaranteed protection service and creates no commitment as to attack volume absorbed or time to mitigate.
- Where reasonably possible, Sinlege will provide information about the reason for the restriction and any steps needed to restore access.
- Serious or repeated breaches of these Terms may result in permanent termination of the contractual relationship and deletion of services and related data.
12. Illegal Content Notices (DSA)
- Point of contact. Reports concerning allegedly illegal content or unlawful use of hosted services may be sent to [email protected] or [email protected]. The same addresses serve as electronic points of contact for users and competent authorities in matters related to hosted illegal content and related legal notices where applicable under Regulation (EU) 2022/2065 (Digital Services Act - DSA). Notices are handled through this email-based process (acknowledgement, review, reasoned decision, and internal complaint where applicable), not through a separate automated notice portal.
- Content of a notice. To allow effective review, a notice should include, where possible: (a) a sufficiently substantiated explanation of why the information is considered illegal content; (b) a clear indication of the exact electronic location of that information (for example URL, IP address, hostname, service identifier, or other locator) and, where necessary, additional information enabling identification of the illegal content; (c) the name and email address of the individual or entity submitting the notice, except for notices concerning offences referred to in Articles 3 to 7 of Directive 2011/93/EU; and (d) a statement confirming the good-faith belief that the information and allegations are accurate and complete.
- Acknowledgement and review. Where the notice contains electronic contact details, Sinlege will send an acknowledgement of receipt without undue delay. Sinlege will review notices in a timely, diligent, non-arbitrary, and objective manner and may request additional information where needed.
- Decisions. Where Sinlege decides to remove or disable access to information, restrict visibility, suspend or terminate a service or Account, or take other restriction measures, it will inform the affected recipient of the service of that decision and provide a clear and specific statement of reasons, including the legal or contractual ground, the facts and circumstances relied on, and information on available redress, unless providing that information would hinder the prevention, detection, or prosecution of criminal offences, would create a serious security risk, would harm the rights of third parties, or is otherwise restricted by mandatory law.
- Internal complaint / appeal. The recipient of the service (and, where appropriate, the notifier) may lodge an internal complaint against a decision under this section within a reasonable period after being informed of the decision, by writing to [email protected] and stating the grounds of the appeal. Sinlege will handle such complaints in a timely, non-discriminatory, diligent, and non-arbitrary manner and will inform the complainant of the outcome without undue delay. Submitting an internal complaint does not limit the right to seek judicial or other remedies available under law.
- Security and emergency exceptions. Sinlege may act immediately - including without prior notice to the Customer - where necessary to prevent ongoing harm, protect infrastructure or other Users, comply with a binding order of a competent authority, or address a serious security, abuse, or legal risk. In such cases, reasons and appeal information will be provided as soon as reasonably possible, subject to the exceptions in item 4.
- Sinlege does not perform a general obligation to monitor information transmitted or stored, but acts when it obtains actual knowledge of illegal content or becomes aware of facts or circumstances from which illegal activity is apparent, in line with the DSA hosting-provider framework and applicable Polish law.
13. Complaints
- Scope. Complaints (reklamacje) related to the Service, payments, Wallet top-ups (including third-party top-ups), Account operation, Shop orders, hosting services, Game Panel, IP Transit, Sinbox, Support tickets, Quests, Reviews, Radio, Translations, SinlegePass, SinlegeLicense, Sinlege2FA, Referral Program, or API access may be submitted to Sinlege in writing at [email protected]. Reports of abuse, illegal content, or suspicious Payment Links may additionally be sent to [email protected].
- Content of a complaint. A complaint should include at least: (a) the complainant's full name and contact email (and Account identifier if applicable); (b) a clear description of the facts and the service concerned; (c) the date on which the issue occurred or was discovered; (d) the requested remedy (e.g. correction, refund, service restoration, explanation); and (e) any supporting evidence reasonably available to the complainant (screenshots, transaction identifiers, Payment Link IDs, timestamps).
- Response time. Sinlege will acknowledge receipt where practicable and will respond to the complaint without undue delay, and in any event no later than 14 days from receipt, unless mandatory law provides a different period. If the matter is complex and a response within 14 days is not possible, Sinlege will inform the complainant of the delay and the expected date of a substantive response.
- Outcome. Sinlege will examine complaints in good faith and, where justified, take remedial action including correction of errors, restoration of access, Wallet adjustments, or refunds to the extent required by applicable law and these Terms. A refusal to uphold a complaint will be reasoned in writing.
- Consumer remedies. Consumers retain all statutory rights under the Act of 30 May 2014 on Consumer Rights and the Civil Code, including warranty rights for digital services where applicable, and the right of withdrawal subject to the exclusions in section 8. Nothing in this section limits those rights.
- Out-of-court resolution. Consumers may seek assistance from competent consumer protection authorities in Poland, including the President of the Office of Competition and Consumer Protection (UOKiK) and municipal or regional consumer ombudsmen (powiatowi/miejscy rzecznicy konsumentów). Consumers may also, where available, use other out-of-court consumer dispute resolution mechanisms organised under Polish law. Use of such mechanisms is voluntary unless mandatory law requires otherwise. Sinlege does not maintain a specific mandatory ADR membership; availability of a particular body or procedure depends on the rules of that body and applicable law.
- Data protection complaints. Complaints regarding personal data processing may be submitted to [email protected]. Data subjects also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) - see the Privacy Policy.
14. Liability
- Sinlege is liable for non-performance or improper performance of obligations to the extent required by mandatory law.
- Sinlege is not liable for outages, failures, delays, or damage caused by factors beyond its reasonable control, including force majeure, upstream provider failures, payment operator issues, Internet failures, acts of third parties, or the Customer's own actions or omissions.
- Sinlege is not responsible for loss of Customer data where the Customer failed to maintain appropriate backups, except to the extent mandatory law provides otherwise.
- Shared-resource performance. The Services operate on shared infrastructure (see section 3). Actual performance - including CPU availability, disk I/O, memory pressure, and network throughput - may fluctuate depending on the overall load on the host node and the activity of other Customers. Unless a particular plan is expressly described as offering dedicated or guaranteed resources, Sinlege does not warrant constant, dedicated, or peak performance, and temporary variations in available capacity inherent to a shared environment do not constitute non-performance or improper performance of the contract. This limitation does not affect any non-waivable statutory rights of Consumers.
- The Customer is responsible for damage caused by their unlawful use of the Service or breach of these Terms.
- Exclusion of indirect damages. To the fullest extent permitted by applicable law, Sinlege is not liable for any indirect, incidental, special, or consequential damages, including lost profits, lost revenue, lost business or opportunities, loss of goodwill, or the cost of substitute services, arising from or in connection with the Services. In relations with Customers who are not Consumers (B2B), Sinlege's liability for lost profits (utracone korzyści) is excluded to the extent permitted by the Civil Code.
- Limitation of aggregate liability. To the fullest extent permitted by applicable law, Sinlege's total aggregate liability arising from or related to a given service shall not exceed the total amount actually paid by the Customer to Sinlege for that specific service during the three (3) months immediately preceding the event giving rise to the claim. This cap does not apply to liability that cannot be excluded or limited under mandatory law, including liability for damage caused intentionally and, towards Consumers, to the extent such limitation would be ineffective under applicable consumer law.
- Data loss. Sinlege does not guarantee the retention, integrity, or recoverability of Customer data and does not provide backups unless an express paid backup feature states otherwise. The Customer is solely responsible for maintaining independent, up-to-date backups of all data, configurations, and content. Sinlege is not liable for loss, corruption, or deletion of Customer data, including data lost as a result of service expiry, suspension, termination, migration, reinstallation, or mitigation measures, except to the extent mandatory law provides otherwise.
- Indemnification (non-Consumers). A Customer who is not a Consumer shall indemnify and hold Sinlege harmless against third-party claims, damages, penalties, and reasonable costs (including reasonable legal costs) arising from that Customer's content, use of the Services, breach of these Terms (including prohibited uses under section 10 and provision of third-party personal data without authorisation), or infringement of third-party or statutory rights. This provision does not apply to Consumers and does not affect non-waivable consumer rights.
15. Privacy and Data Protection
Rules regarding personal data processing are described in the Privacy Policy. Rules regarding cookies and similar technologies are described in the Cookie Policy. Third-party components such as Stripe may process data under their own terms. Security verification is handled by Sinlege's own SinlegePass captcha and does not involve third-party data processors.
16. Third-party wallet top-ups (Payment Links)
- A Customer may create Payment Links in the customer panel or via the API. Each link specifies a fixed amount and exposes a payment page at sinlege.com/pay/<id>. Each Payment Link is intended for a single successful payment that credits only the recipient Customer's closed Sinlege Wallet.
- Closed system - not a payment service. Payment Links and the Wallet form a closed system solely for funding and paying for Sinlege's own services. They do not enable withdrawals, cash-outs, remittances, peer-to-peer transfers between Users, merchant acquiring for third parties, or other payment-institution or e-money functions. Credited amounts remain internal Wallet balance usable only within the Service under section 6.
- Role of Sinlege. Sinlege provides technical infrastructure and payment initiation through the payment operator. The Payer's contract for payment processing and immediate crediting of the recipient's Wallet is concluded with Sinlege (as service provider). Sinlege is not a party to any private arrangement between the Payer and the recipient regarding how the recipient later spends Wallet funds on Sinlege services. Sinlege does not operate a regulated crowdfunding, payment, remittance, or investment platform and does not verify any stated purpose of a payment.
- Payer obligations. Before paying, the Payer must provide accurate first and last name where requested and actively confirm (for example by selecting an unticked confirmation): (i) acceptance of these Terms, the Privacy Policy, and Consumer information; (ii) that the personal data provided is accurate and refers to the Payer; (iii) that they expressly request immediate performance of the wallet top-up and crediting service in full after successful payment; and (iv) that they have been informed that, once the amount is credited to the recipient's Wallet, they lose the statutory 14-day right of withdrawal in respect of that performance to the extent permitted by Article 38 point 1 of the Act on Consumer Rights (wording shown in the payment checkout). Where the Payer is a Consumer, Sinlege provides confirmation of the contract on a durable medium where reasonably available (for example by email where an address is available from the payment operator, and/or transaction records), in accordance with Article 21 of the Act on Consumer Rights. The Payer is also informed that the payment operator (Stripe) may, as part of the payment process, collect and record the Payer's email address under Stripe's own terms and privacy policy; if Stripe transmits the Payer's email to Sinlege, Sinlege processes it solely for transaction recording and anti-fraud purposes as described in the Privacy Policy.
- The Payer should only pay if they intend to top up the identified recipient's closed Wallet for Sinlege services and trust the recipient. Amounts credited through Payment Links are non-refundable as a rule once credited, except where mandatory law, the payment operator's rules, a justified complaint decision, or a Consumer's non-waivable rights require a reversal (e.g. unauthorised transaction, manifest technical error, fraud). Consumers are encouraged to contact Sinlege before escalating a payment dispute; this does not limit their statutory rights.
- The Customer (recipient) may not use Payment Links to misrepresent identity, impersonate others, solicit payments for unlawful purposes, deceive Payers, offer withdrawals or cash-outs, operate as a payment intermediary, or circumvent consumer, tax, AML, or financial regulations.
- The Customer is solely responsible for legal, tax, accounting, and reporting obligations related to funds received in the Wallet, including income tax, VAT, or register obligations if applicable. Sinlege does not provide tax or legal advice.
- Sinlege may refuse, restrict, suspend, invalidate Payment Links, block payments, or withhold crediting where required by law, payment operator rules, or reasonable suspicion of fraud, abuse, payment-dispute risk, breach of these Terms, or risk to Payers or the Service.
- Payers and third parties may report suspicious payment pages to [email protected] or [email protected]; reports are handled under sections 12 and 13.
17. API Access and API Keys
- Sinlege may make a public API available to Customers, including endpoints for creating Payment Links and checking their payment status on behalf of the API Key owner.
- API Keys are personal and confidential. Only the SHA-512 hash of an API Key is stored by Sinlege; the raw key is shown to the Customer once at creation. The Customer is solely responsible for keeping API Keys secret and for all activity performed using them.
- API Keys can be created, listed, regenerated, and deleted in the customer panel. Regeneration or deletion of an API Key invalidates the prior raw key immediately.
- The Customer must not share API Keys with unauthorized persons, embed them in client-side code, or expose them publicly. Suspected exposure must result in immediate regeneration.
- Sinlege may apply reasonable rate limits, request quotas, fair-use limits, payload size limits, and abuse protections, and may temporarily or permanently restrict API access for security, technical, or legal reasons.
- The API may not be used to send unsolicited communications, to create deceptive payment or top-up flows, to test or scan systems beyond legitimate use of one's own integration, or for any other purpose prohibited by these Terms or by law.
- Sinlege may change API endpoints, parameters, response shapes, and authentication mechanisms over time, providing reasonable advance notice for breaking changes where feasible. Versioned endpoints (e.g. /api/v1/...) aim at stability of their published surface within the same major version.
- The Customer is responsible for ensuring that any third party using the API on the Customer's behalf complies with these Terms and applicable law.
- Misuse and liability. The Customer is fully responsible for all requests and activity carried out using their API Keys, including by third parties, and bears the consequences of any misuse, key exposure, automated abuse, scraping, or excessive load. Sinlege may immediately throttle, suspend, or revoke API access to protect the Service, and (for Customers who are not Consumers) the Customer shall reimburse Sinlege for reasonable costs and third-party claims arising from API misuse or breach of this section. The API is provided on an "as-is, as-available" basis without any availability or uptime guarantee, save for non-waivable statutory rights of Consumers.
18. SinlegePass - Captcha Subscription
- Service description. SinlegePass is an optional add-on that provides access to a hosted captcha verification API. Subscribers receive API keys (a public site key and a private secret key) and a monthly verification quota depending on their selected plan.
- Plans and billing. SinlegePass is available in the following tiers shown in the customer panel: Free (500 verifications per calendar month, no charge) and Pro (unlimited verifications, 50 PLN per 30-day period). The prices stated are the total amounts charged. Sinlege conducts unregistered business activity (nierejestrowana działalność gospodarcza) and is not a VAT payer; no VAT is applied to or included in the stated prices. Payment is deducted from the user's Sinlege wallet balance at the time of purchase. There are no automatic renewals - the user renews manually.
- Prepayment cap. A subscription may be purchased up to 60 days in advance of the current expiry date. This cap exists as a consumer protection measure to limit the maximum funds a user could lose in the unlikely event of service discontinuation. If a user attempts to purchase a plan that would result in an expiry date more than 60 days from the time of purchase, the request will be rejected.
- Expiry and downgrade. If a paid subscription expires and is not renewed, the account is automatically downgraded to the Free plan. No data is deleted as a result of a downgrade, but verifications that would exceed the Free plan quota will be rejected until the plan is renewed.
- Refunds. Purchased SinlegePass periods are non-refundable once performance has begun, except where mandatory consumer law requires otherwise. At the time of purchase, the Consumer must actively confirm that they request immediate performance and acknowledge loss of the 14-day withdrawal right once performance has begun, to the extent permitted by Article 38 points 1 and/or 13 of the Act of 30 May 2014 on Consumer Rights. Confirmation of the contract and consents is provided on a durable medium as described in section 8.
- Availability. Sinlege will make reasonable efforts to keep the captcha API available. However, the API is provided on an "as-is, as-available" basis and Sinlege does not guarantee uninterrupted availability. Planned or emergency maintenance may cause temporary unavailability. Sinlege's liability for service interruptions is limited to the proportional value of the subscription period during which the interruption occurred, and only where the interruption was caused directly by Sinlege and lasted more than 24 consecutive hours.
- Acceptable use. The API keys must be used only for the purpose of verifying human interactions on websites or applications controlled by the account holder. Use of the API to attempt to reverse-engineer the captcha verification logic, to stress-test or flood the verification endpoint, or to resell access to the API to third parties is prohibited.
- Secret key confidentiality. The secret key (prefixed
sinlege_priv_) must be kept confidential and used only in server-side code. Sinlege is not liable for any consequences arising from the exposure of a secret key by the account holder.
19. SinlegeLicense - License Key Management
- Service description. SinlegeLicense is an optional add-on that lets account holders create, manage, and validate license keys for their own software products. Each key can optionally be bound to an IP address or hardware ID (HWID), and stores the last 5 validation entries.
- Plans and billing. SinlegeLicense is available in the following tiers: Free (50 keys, no charge), Pro (1,000 keys, 10 PLN/30 days), Ultra (100,000 keys, 75 PLN/30 days), and Enterprise (10,000,000 keys, 200 PLN/30 days). The prices stated are the total amounts charged. Sinlege conducts unregistered business activity (nierejestrowana działalność gospodarcza) and is not a VAT payer; no VAT is applied to or included in the stated prices. Payment is deducted from the user's Sinlege wallet balance at the time of purchase. There are no automatic renewals - the user renews manually.
- Prepayment cap. A single SinlegeLicense purchase may not exceed 60 days of service. To continue beyond 60 days the account holder must renew manually.
- Key limits and downgrade. If a subscription expires or is downgraded, keys that exceed the new plan's quota become inactive and are not validated until the account holder either upgrades or deletes excess keys. No keys are deleted automatically.
- API keys. Account holders may create up to 10 SinlegeLicense API keys (prefixed
sinlege_priv_) to manage their license keys programmatically. Only the SHA-256 hash of each API key secret is stored by Sinlege; the raw secret is shown once at creation and cannot be recovered. API keys may be revoked at any time from the dashboard. Sinlege is not liable for any consequences arising from the exposure of an API key secret by the account holder. - Validation data. When an end-user's device calls the public validation endpoint, Sinlege may process the license key string, the client IP address (if the key is IP-bound), and the HWID string (if the key is HWID-bound). This data is processed on behalf of the account holder, who acts as the data controller in relation to their end-users. Sinlege acts as a data processor for that purpose. The terms of that data processing relationship are governed by Section 23 of these Terms (Data Processing Agreement - SinlegeLicense Annex), which is accepted automatically upon first use of the SinlegeLicense service. Account holders are responsible for providing appropriate privacy disclosures to their own end-users and for ensuring a lawful basis for processing end-user IP addresses and HWIDs.
- Acceptable use. License keys may only be used to protect lawful software. Using SinlegeLicense to restrict access to malware, illegal content, or to facilitate fraud is prohibited and will result in immediate account suspension under section 11.
- Refunds. Purchased SinlegeLicense periods are non-refundable once performance has begun, except where mandatory consumer law requires otherwise. At the time of purchase, the Consumer must actively confirm that they request immediate performance and acknowledge loss of the 14-day withdrawal right once performance has begun, to the extent permitted by Article 38 points 1 and/or 13 of the Act of 30 May 2014 on Consumer Rights. Confirmation of the contract and consents is provided on a durable medium as described in section 8.
20. Sinlege2FA - Encrypted TOTP Authenticator
- Service description. Sinlege2FA is a free feature available to all registered, verified account holders. It allows users to store Time-based One-Time Password (TOTP) secrets in their account vault, encrypted client-side in the browser, and to generate TOTP codes for use with third-party services.
- Encryption and security model. All TOTP secrets are encrypted in the user's browser using AES-256-GCM before being transmitted to Sinlege servers. The encryption key is derived client-side from the user's account password using PBKDF2-SHA-256 (200 000 iterations) and a per-user random salt. Sinlege never receives or stores the plaintext TOTP secret. Unlocking the vault requires the user's account password and successful completion of a SinlegePass captcha on every session.
- User responsibility. The security of the encrypted vault depends entirely on the strength and confidentiality of the user's account password. Users are solely responsible for: (a) maintaining a strong, unique password; (b) ensuring that their end-devices and browsers are not compromised; (c) any consequences resulting from unauthorised access caused by disclosure of their password. Sinlege strongly recommends using a strong password and keeping it confidential.
- Limits. Each account may store up to 50 vault entries. Sinlege reserves the right to adjust this limit with reasonable notice.
- Service availability. Sinlege2FA is provided on an "as-is, as-available" basis. Sinlege does not guarantee uninterrupted access to the vault and is not liable for any consequences arising from temporary unavailability. Users are responsible for maintaining independent backups of their TOTP secrets.
- No liability for lost access. If a user loses access to their account password and is unable to authenticate, Sinlege cannot recover or decrypt vault contents. Sinlege is not liable for any losses (including loss of access to third-party services) resulting from the irrecoverability of encrypted vault data.
- Acceptable use. Sinlege2FA may only be used to store legitimate TOTP secrets for the user's own accounts. Automated bulk storage, credential stuffing, or any use of the vault to facilitate unauthorised access to third-party systems is prohibited and will result in account suspension under section 11.
- No fees. Sinlege2FA is currently provided free of charge as part of a registered Sinlege account. Sinlege reserves the right to introduce paid tiers in the future, with at least 30 days' prior notice to existing users.
21. Amendments to the Terms
- Sinlege may amend these Terms for important reasons, including changes in law, payment methods, security requirements, technical operation, or the scope of the Service.
- The updated version will be published in the Service with a new effective date.
- If a change materially affects existing customers who are Consumers, Sinlege will provide reasonable prior notice by email, panel notice, or website publication where feasible, and will respect mandatory rules on amending distance contracts under Polish law (including any minimum transition period where required).
22. Governing Law and Final Provisions
- These Terms are governed by Polish law.
- Nothing in these Terms limits any non-waivable rights of Consumers under applicable law.
- For Consumers, mandatory provisions of the country of habitual residence may apply where required by EU or international law.
- Consumers may use out-of-court complaint and redress mechanisms available under Polish law, including assistance from UOKiK, municipal or regional consumer ombudsmen, and other bodies competent for consumer disputes in Poland, as further described in section 13. Use of such mechanisms is voluntary unless mandatory law requires otherwise.
- Language. These Terms may be published in English and, where available, in Polish. In the event of any discrepancy between language versions, the Polish version is binding.
- In matters not regulated here, the relevant provisions of Polish law apply, including civil law, consumer law, data protection law, and the law on electronic services.
- Severability. If any provision of these Terms is or becomes invalid, ineffective, or unenforceable in whole or in part, the validity and enforceability of the remaining provisions shall not be affected. The invalid or unenforceable provision shall be deemed replaced by a valid and enforceable provision that most closely reflects the original economic and legal intent. As regards Consumers and Entrepreneurs on Consumer Rights, any provision found to be an unfair (abusive) contract term does not bind them, while the remaining provisions of these Terms continue to apply.
23. Data Processing Agreement - SinlegeLicense Annex (Art. 28 GDPR)
This section constitutes a Data Processing Agreement (DPA) within the meaning of Article 28 of Regulation (EU) 2016/679 (GDPR) between Sinlege (as Data Processor) and the SinlegeLicense account holder (as Data Controller). By activating the SinlegeLicense service - i.e. by creating a SinlegeLicense subscription or submitting the first validation request through the service - the Controller accepts and enters into this DPA automatically, without the need for a separate written instrument.
- Parties.
- Data Processor: Krzysztof Mańczak, Gumna 2a, 64-420 Kwilcz, Poland, conducting unregistered business activity (nierejestrowana działalność gospodarcza), trading as Sinlege. Contact: [email protected].
- Data Controller: the natural or legal person who holds a SinlegeLicense account and whose end-users' personal data is processed through the validation endpoint.
- Subject-matter and purpose of processing. The Processor processes personal data of the Controller's end-users solely to provide the SinlegeLicense license key validation service - specifically to receive validation requests, verify key status, record the last 5 validation entries per key, and return a validation result to the Controller's software.
- Duration. Processing continues for the duration of the Controller's active SinlegeLicense subscription. Upon termination of the subscription or deletion of the account, the Processor shall delete all remaining validation records belonging to the Controller's keys without undue delay, unless retention is required by law.
- Nature of processing. Receiving API validation requests, storing (on a rolling basis) up to the last 5 validation entries per key, returning a boolean validation result, and enforcing IP-binding or HWID-binding where configured by the Controller.
- Categories of personal data. IP addresses of end-user devices (if the Controller enables IP-binding on a key), HWID strings provided by the end-user application (if the Controller enables HWID-binding), and validation timestamps. No other personal data of end-users is collected through the validation endpoint.
- Categories of data subjects. End-users of the Controller's software products whose devices call the SinlegeLicense validation endpoint.
- Controller's obligations. The Controller shall: (a) ensure an appropriate legal basis under the GDPR for the collection and processing of end-user IP addresses and HWIDs before enabling those features on any key; (b) provide end-users with the required privacy disclosures under applicable law before collecting or transmitting any personal data to the validation endpoint; (c) not instruct the Processor to process personal data in a manner that would infringe applicable data protection law; (d) notify the Processor promptly of any inaccuracies in its processing instructions.
- Processor's obligations. The Processor shall:
- (a) process personal data only on the Controller's documented instructions as established by the Controller's SinlegeLicense configuration (enabling or disabling IP-binding and HWID-binding per key), and not for any other purpose;
- (b) ensure that persons authorised to process the personal data are bound by appropriate confidentiality obligations;
- (c) implement technical and organisational measures appropriate to the risk (as described in section 12 of the Privacy Policy);
- (d) not engage a new sub-processor without giving the Controller reasonable prior notice and the opportunity to object (see item 9 below);
- (e) assist the Controller, to the extent technically feasible given the limited scope of data processed, in responding to requests from data subjects exercising their rights under the GDPR;
- (f) assist the Controller in fulfilling its obligations under Articles 32-36 GDPR (security, breach notification, data protection impact assessments) insofar as the Processor holds information necessary for that purpose;
- (g) at the choice of the Controller, delete or return all personal data processed under this DPA upon termination, unless applicable law requires retention;
- (h) provide the Controller, upon written request to [email protected], with the information reasonably necessary to demonstrate compliance with this DPA and Article 28 GDPR. The Controller's audit rights under Article 28(3)(h) GDPR may be exercised by submitting a written request; on-site audits require reasonable advance notice and may be subject to a confidentiality agreement;
- (i) inform the Controller without undue delay if, in the Processor's opinion, an instruction infringes applicable data protection law.
- Sub-processors. The Processor may engage infrastructure sub-processors (hosting, server, and network providers) for the technical operation of the SinlegeLicense service. A current list of sub-processors is available on request at [email protected]. The Processor shall notify the Controller of any intended changes to sub-processors (additions or replacements) at least 14 days in advance by publishing a notice in the customer panel or on the Service website, giving the Controller the opportunity to object in writing. If the Controller objects and the parties cannot agree, the Controller may terminate the SinlegeLicense subscription. Sub-processors are bound by data protection obligations substantially equivalent to those in this DPA.
- International transfers. Any transfer of personal data outside the European Economic Area is subject to lawful transfer mechanisms as described in section 6 of the Privacy Policy (adequacy decisions or standard contractual clauses, as applicable).
- Personal data breach. The Processor shall notify the Controller without undue delay upon becoming aware of a personal data breach affecting the Controller's end-user data processed under this DPA, and shall provide the Controller with information reasonably necessary for the Controller to meet its obligations under Article 33 GDPR.
- Amendments to this DPA. Sinlege may update this DPA for legal, technical, or operational reasons, providing reasonable prior notice through the Service (by publishing a revised version with an updated effective date and, where materially significant, a panel notice). Continued use of the SinlegeLicense service after the effective date of any change constitutes acceptance of the updated DPA. If the Controller does not accept the updated DPA, it must cease using the SinlegeLicense service before the effective date.
24. Quests (wallet rewards)
- Sinlege may offer optional Quests in the customer panel. Each Quest describes a specific task and a one-time Wallet reward amount in PLN (or another currency shown in the panel). Examples of Quest types include, without limitation: enabling security features (such as two-factor authentication); linking Discord; writing a review; using an API; finding site easter eggs; keeping a hosted service's resource usage (for example CPU or memory) below a stated threshold for a continuous period; maintaining service uptime; Discord community activity (for example sending a stated number of messages on Sinlege's Discord server, or remaining a member for a stated number of days); wallet top-ups; or holding an active paid plan where indicated.
- Rewards are credited only after the Customer successfully claims a completed Quest in the panel. Each Quest reward may be claimed at most once per Account, unless the Quest description expressly states otherwise.
- Completion is determined by Sinlege's trackers and records associated with the Account (and, where a Quest requires Discord, the Discord account linked to the Account). Discord-related Quests require a linked Discord account and participation in Sinlege's Discord server as described in the Quest. Message counts and membership duration may be recorded by Sinlege's Discord bot for Quest verification. Service-metric Quests may use resource samples collected when the Customer views service statistics in the panel and/or by background sampling of the Customer's services.
- Easter-egg Quests may rely on a first-party browser cookie or similar local preference that records which easter eggs the Customer has unlocked, and - when the Customer is logged in - may synchronise that state to the Account for verification. Clearing cookies or using another device may reset local easter-egg state until it is unlocked again or re-synced.
- Quest availability, reward amounts, tracker parameters, and eligibility rules may change or be withdrawn at any time. Sinlege may refuse, withhold, or reverse a reward obtained through abuse, multiple Accounts created to farm rewards, automation that circumvents intended use, false or spoofed completion signals, or incorrect completion detection.
- Quest rewards are promotional Wallet credits for use exclusively within the Service under section 6. They are not cash, do not create a payment account or e-money institution relationship, are non-transferable between Accounts, cannot be withdrawn, and are subject to the same closed-Wallet and refund rules as other Wallet balance unless mandatory law provides otherwise. Claiming a Quest does not create a separate sales contract for a paid Service beyond the promotional credit itself.
- Participation in Quests is voluntary. Failure to complete Quests does not affect access to paid Services the Customer has already ordered, except where a Quest is separately required by law or contract.
- Use of Discord in connection with Quests remains subject to Discord's own terms and policies. Sinlege is not responsible for Discord outages, account bans on Discord, or the Customer's failure to meet Discord-side requirements.
25. Customer Reviews
- Customers may submit optional Reviews of Sinlege through the panel. By submitting a Review, the Customer grants Sinlege a non-exclusive, worldwide, royalty-free licence to display, moderate, translate for display, and publish the Review (including rating and text) on Sinlege websites and marketing materials, with or without the Customer's display name as configured in the panel.
- Reviews must be truthful to the Customer's genuine experience, must not contain illegal content, personal data of third parties without a lawful basis, malware links, or spam. Sinlege may refuse, edit for length/clarity, hide, or remove Reviews that violate these Terms or applicable law, and may mark Reviews as verified purchase where eligibility criteria are met.
- A Review does not create any contractual warranty beyond mandatory law. Publishing or withholding a Review does not affect paid Services already ordered, except where content rules require Account action under these Terms.
26. Sinlege Radio
- Where offered, Sinlege Radio is an optional streaming feature available to Accounts that Sinlege has granted Radio access. Access may be limited, revoked, or changed at any time.
- Radio is provided for personal listening within the panel (and Discord voice features where Sinlege enables them). The Customer may not redistribute streams, circumvent access controls, or use Radio in a way that infringes third-party rights.
- Sinlege may process listening session and usage statistics (for example session identifiers, listen duration, and aggregate presence) to operate Radio, measure load, and administer access, as described in the Privacy Policy. Radio availability depends on infrastructure and third-party content sources and is not guaranteed uninterrupted.
27. IP Transit
- Nature of the service. Where offered, IP Transit is a digital network service under which Sinlege assigns one or more public IPv4 addresses (Transit IPs) from its address pool to the Customer and delivers connectivity to those addresses over a WireGuard tunnel terminated on Sinlege infrastructure. IP Transit is not a dedicated physical circuit, not a BGP session sold as a standalone product, and not a guarantee of any particular upstream path, ASN announcement control by the Customer, or unfiltered reachability from every network on the Internet.
- Bandwidth - up to 10 Gbps. Advertised throughput for IP Transit is up to 10 Gbps (do 10 Gbps). This figure is a maximum, shared, and burstable ceiling on shared infrastructure and does not constitute a guaranteed, dedicated, continuous, or sustained 10 Gbps commitment. Actual throughput at any moment may be lower due to host and uplink load, WireGuard encryption overhead, the Customer's path and client, congestion, fair-use measures, rate limits, filtering, maintenance, incidents, or upstream conditions. The Customer acknowledges that throughput may also be limited by the performance of the Customer's own Internet connection, hardware, operating system, WireGuard implementation, or intermediary networks, which remain outside Sinlege's control. No chart, marketing statement, or historical measurement creates a binding bandwidth SLA unless a separate written SLA expressly states otherwise.
- Ordering and pricing. IP Transit is ordered from the customer panel (including via a Shop entry that redirects to the IP Transit section). Classic Shop plan checkout is not used for IP Transit SKUs. The applicable prices for Transit IPs and Traffic credits (in PLN), available pool capacity, and technical parameters are shown in the panel before confirmation and may be changed by Sinlege for future purchases. Payment is made from the Wallet balance in PLN.
- Complimentary companion IPv6. Where offered at the time of assignment, each active Transit IPv4 may include a complimentary companion IPv6 address mapped from that IPv4 (for example, IPv4 87.76.134.112 may correspond to IPv6 2a06:9801:79c:69:87:76:134:112, or such other mapping as shown in the panel or WireGuard configuration). The companion IPv6 is provided free of charge for the term of the related Transit IPv4 and is delivered over the same WireGuard peer where technically enabled. The companion IPv6 is a promotional / optional feature: Sinlege may modify the mapping, suspend, withdraw, charge for, or discontinue complimentary IPv6 for new and/or existing assignments at any time, with or without prior notice, including for technical, addressing, upstream, or commercial reasons. Complimentary IPv6 does not create a separate paid product, ownership of addressing rights, or a guaranteed SLA for IPv6 reachability. Withdrawal or change of complimentary IPv6 alone does not by itself entitle the Customer to a refund of amounts paid for the Transit IPv4 or Traffic credits, without prejudice to non-waivable Consumer rights.
- Transit IP term and renewal. Each Transit IP is assigned for a stated period shown at purchase (typically thirty (30) days from activation). Each IP has its own expiry. A Transit IP may be renewed from the customer panel for a further period of up to thirty (30) days per renewal, only within a renewal window of three (3) days before the expiry date through three (3) days after the expiry date. After that post-expiry grace period without successful renewal (manual or auto-renewal where enabled and funded), the assignment ends, the address returns to the pool, and related WireGuard peer configuration for that address is updated or removed. Auto-renewal, where indicated in the panel and funded from the Wallet, may extend the term at expiry; failed auto-renewal does not remove the three-day post-expiry renewal window.
- Traffic credits. Data transfer for IP Transit is sold separately as Traffic credits (e.g. in TB packs). Each credit expires a stated period after purchase (typically thirty (30) days), regardless of remaining unused volume. Unused expired credits are forfeited and are not refundable except where mandatory consumer law requires otherwise. Credits are consumed on a first-to-expire (FIFO) basis. The Customer may purchase any available quantity of credits shown in the panel. Metering: unless the customer panel expressly states a different method for a given product, billed transfer is the sum of inbound (received) and outbound (sent) traffic associated with the Customer's WireGuard peer / Transit IP assignment. Metering is based on Sinlege's counters (including WireGuard transfer statistics); Sinlege's metering is authoritative for billing unless the Customer proves a material metering error with objective evidence.
- Suspension. Sinlege may suspend forwarding for the Customer's WireGuard peer (hard suspend) where: (a) the Customer has no active Transit IP; (b) the Customer has no remaining non-expired Traffic credit; (c) payment or renewal fails; (d) Sinlege reasonably suspects abuse, spoofing, or a breach of these Terms; or (e) Sinlege takes an operator protective measure under this section. Suspension for exhaustion of prepaid credits or for a proportionate protective measure does not by itself create a refund right, without prejudice to non-waivable Consumer rights. Sinlege may also reinstate a peer after the Customer restores eligibility (e.g. purchases credits or an IP) or after an administrative unsuspend.
- WireGuard and configuration. The Customer receives a WireGuard client configuration generated by Sinlege. Private keys must be kept confidential. Key rotation invalidates the previous private key immediately. The Customer is responsible for correct client configuration, firewalling on their side, and lawful use of assigned addresses. The Customer is responsible for securing the endpoint from which the WireGuard tunnel originates. The generated config uses a private tunnel address on the WireGuard interface; Sinlege maps assigned Transit IP(s) with source NAT for outbound traffic and destination NAT for inbound traffic so that connections to and from those public addresses are delivered over the tunnel, and may include a complimentary companion IPv6 on the interface where that feature is enabled. The config may route general traffic through the tunnel (e.g. AllowedIPs = 0.0.0.0/0 and, where IPv6 is enabled, ::/0) so that outbound connections appear under those Transit addresses. Services that should accept inbound connections on a Transit IP must listen on all interfaces or on the tunnel address (or the assigned public address where passthrough mode is enabled). The Customer must not attempt to claim or spoof addresses not assigned to them. Loss or disclosure of a private key is at the Customer's risk; Sinlege is not obliged to restore prior keys.
- Anti-spoofing and routing. Sinlege applies technical measures so that traffic sourced from the Customer's tunnel is accepted only for addresses assigned to that Customer. The Customer must not attempt to send packets with forged source addresses, to hijack prefixes, or to interfere with other Customers' assignments. Violation may result in immediate suspension under section 11 without refund of unused term or credits, to the extent permitted by mandatory law.
- Acceptable use. Transit IPs and traffic may only be used in accordance with section 10 (Prohibited Uses), applicable law, and fair-use rules in section 3. IP Transit must not be used for spam, malware distribution, DDoS participation, open proxies/relays that abuse third parties, network scanning that violates law, or any activity that causes Sinlege's prefixes to be blacklisted, rate-limited, or upstream-filtered. Sinlege may null-route, filter, rate-limit, reclaim addresses, or suspend the peer immediately to protect infrastructure, other Customers, or Sinlege's contractual relations with upstream providers.
- Customer responsibility for traffic and third-party claims. The Customer is solely responsible for all traffic, content, and connections sent or received via their Transit IPs and WireGuard peer, including by any person using the Customer's keys or devices. The Customer shall not cause Sinlege to process or transmit unlawful content. For Customers who are not Consumers, the Customer shall indemnify and hold Sinlege harmless against third-party claims, fines, blacklisting costs, upstream charges, and reasonable legal costs arising from the Customer's use of IP Transit, breach of these Terms, or infringement of third-party or statutory rights, in line with section 14.
- Operator protective measures (no liability for proportionate action). To protect Sinlege, shared infrastructure, and other Customers, Sinlege may - without prior notice where reasonably necessary - (a) apply fair-use throttling below the "up to 10 Gbps" ceiling; (b) filter, scrub, or null-route addresses; (c) suspend or remove WireGuard peers; (d) change, reassign, or reclaim Transit IPs; (e) refuse further sales from the pool; and (f) cooperate with upstream providers, CERTs, RIPE NCC or other registries, or competent authorities. A Transit IP may also be changed, reassigned, or reclaimed for reasons related to upstream providers, RIPE or registry requirements, IP or network reputation (including blacklisting or abuse listings), legal or regulatory obligations, or technical or operational needs. Such measures taken in good faith do not constitute improper performance of the contract and do not entitle the Customer to damages or service credits, without prejudice to non-waivable Consumer rights. Where reasonably practicable, Sinlege will inform the Customer of a Transit IP change and provide updated configuration.
- No guaranteed DDoS protection for IP Transit. Unless a separate paid protection product expressly states otherwise, IP Transit includes no guaranteed DDoS mitigation capacity. Best-effort mitigation under section 11 does not create a protection SLA.
- Shared resources and no SLA. IP Transit uses shared infrastructure and shared address pools. Sections 3 and 14 on shared resources, fair use, liability limits, and absence of a general uptime or performance SLA apply in full. Sinlege does not warrant continuous global reachability of any Transit IP, any particular latency/jitter/packet-loss target, or any sustained bandwidth.
- Limitation of liability (IP Transit). Without limiting section 14, and except for non-waivable statutory rights of Consumers, Sinlege's aggregate liability arising from IP Transit (including bandwidth, reachability, metering, suspension, or address reclaim) in any billing month is limited to the amounts actually paid by the Customer to Sinlege for IP Transit and Traffic credits in that month. Sinlege is not liable for lost profits, loss of data in transit, reputational harm, blacklisting by third parties (including spam blocklists, abuse databases, reputation services, and content-delivery providers), or indirect or consequential loss, to the maximum extent permitted by law.
- Digital content / immediate performance. IP Transit and Traffic credits are digital services that begin immediately upon successful Wallet debit and activation in the panel. For Consumers, the information and withdrawal rules in section 8 apply: the Consumer must actively confirm that they request immediate performance and acknowledge loss of the withdrawal right once performance has begun; confirmation of the contract and consents is provided on a durable medium. The statutory right of withdrawal does not apply to the extent permitted by Article 38 points 1 and/or 13 of the Act of 30 May 2014 on Consumer Rights.
- No resale of addresses as property. Transit IPs remain under Sinlege's (or its upstream's) addressing authority. Assignment is a contractual right of use for the term, not a transfer of IP address ownership or registration rights (e.g. RIPE objects) unless expressly agreed in writing. The Customer may not resell, lease, or sublicense Transit IPs as standalone addressing products without Sinlege's prior written consent.
28. Support, Status, Translations, and Referrals
- Support. Customers may contact Sinlege through Support channels offered in the panel (including tickets) and by email at [email protected]. Response times are handled under section 13 (Complaints) where a matter is a complaint; ordinary support requests are handled on a commercially reasonable basis. AI-assisted replies in Support, where offered, are informational only and may be incorrect; the Customer remains responsible for verifying advice before acting on it.
- Priority Support (optional add-on). Where offered in the Shop, the Customer may purchase Priority Support for the period and price shown at checkout (Wallet debit). Priority Support means, and is limited to, the following:
- Faster ticket handling. Tickets opened by a Customer with active Priority Support are marked as priority and placed at the top of the staff Support queue so that they are reviewed and answered sooner than ordinary (non-priority) tickets, on a commercially reasonable basis. Priority Support does not create a guaranteed response-time SLA, fixed hour commitment, or service credits unless a separate written SLA expressly states otherwise.
- Support PIN and telephone assistance. Upon purchase (or while Priority Support remains active), the Customer receives a six-digit Support PIN. Presenting a valid Support PIN allows the Customer to obtain support by telephone conversation with Sinlege support, subject to staff availability, identity verification using the PIN and Account details, and reasonable use. The Support PIN is personal to the Account; the Customer must keep it confidential and must not share it with third parties. Sinlege may refuse or end a call if the PIN cannot be verified, if the call is abusive, or if the request is outside the scope of Support.
- What Priority Support is not. Priority Support does not guarantee uninterrupted telephone availability, does not replace the need to open a panel ticket where a written record is required (including complaints under section 13), does not waive these Terms, and does not entitle the Customer to preferential treatment of unlawful, abusive, or out-of-scope requests.
- Duration and renewals. Priority Support remains active until the expiry shown in the panel for that purchase (and any extension by a subsequent purchase). When it expires, tickets lose priority marking for future handling and the Support PIN ceases to authorise telephone support until Priority Support is purchased again.
- Status. Status information published by Sinlege describes observed or declared Service availability and incidents for information only. Status pages and banners do not create an uptime SLA, service credits, or a guarantee of continuous availability unless a separate written SLA expressly states otherwise.
- Translations. Invited translators may propose localisation string changes through the Translations panel. Submissions are suggestions only; Sinlege may approve, reject, edit, or delay publication at its discretion. Translators do not acquire ownership of Sinlege's software, branding, or published text by submitting translations. Misuse of translator access (including spam, abusive content, or attempts to inject malicious strings) may result in revocation of access under section 11.
- Referral Program. Where enabled, Customers may obtain referral links and view related statistics in the panel. Any rewards, eligibility rules, and attribution windows are those shown in the panel at the relevant time. Sinlege may modify or discontinue the Referral Program for future activity. Self-referrals, fraud, and abuse may void rewards and lead to Account action under section 11. Referral tracking may process referral identifiers as described in the Privacy Policy.
29. Sinbox - Inbound Disposable Email
- Nature of the service. Where offered, Sinbox is a digital service under which Sinlege assigns the Customer a dedicated inbound email address at the @sinlege.eu domain (the local part chosen by the Customer within the rules shown in the panel). Sinbox is inbound-only: it receives email for display in the customer panel but does not provide outbound SMTP sending, IMAP, POP3, or full mailbox hosting comparable to a general email provider.
- Purpose. Sinbox is intended primarily for receiving verification codes, one-time passwords, and similar short transactional messages. It is not intended for long-term correspondence, marketing lists, bulk mail storage, file exchange, or unlawful content.
- Plans and billing. Sinbox is offered as a single paid tier shown in the panel (currently 1.99 PLN per 30-day period). The price stated is the total amount charged. Sinlege conducts unregistered business activity (nierejestrowana działalność gospodarcza) and is not a VAT payer; no VAT is applied to or included in the stated price. Payment is deducted from the Customer's Wallet balance at activation or renewal. There are no automatic renewals; the Customer renews manually from the panel.
- Activation and renewal only. The Customer may activate Sinbox once and thereafter may extend the service only by renewal of the same subscription period. There is no self-service option to change the Sinbox plan tier (only one tier is offered) or to change the assigned local-part address after confirmation in the panel. A change of address after confirmation requires contact with Support and is granted only at Sinlege's discretion where reasonably justified (for example documented impersonation risk or operator error).
- Address selection and lock. Before first use, the Customer chooses a local-part name subject to format rules, reserved-name blocks, and automated review shown in the panel. The Customer must confirm that the address becomes permanent after confirmation. Once confirmed, the address is locked to the Account and cannot be edited by the Customer in the panel.
- Retention and storage limits. Sinbox applies a total storage limit of 1 GB per Account for stored message text (metadata, sanitised plain text, and sanitised HTML body). Each individual inbound message is limited to 2 MB at SMTP acceptance (attachments are not stored). There is no separate cap on message count; storage used is the limiting factor and is shown in the panel. When a new inbound message would exceed the limit, the oldest stored messages are deleted automatically to make room. If a single inbound message alone exceeds 1 GB after sanitisation, it may be rejected. While the subscription is active, the Customer may delete individual messages or use delete all to remove every stored message at once from the panel. Email attachments are not stored; only message metadata and sanitised body content may be retained. Automated delivery-failure reports (bounces), mailer-daemon notices, and similar system-generated messages are not stored in the panel.
- Panel features. The panel may offer search within stored messages (performed locally in the browser on data already loaded for the Account), optional unread indicators and sound notifications while the dashboard is open, and a storage usage meter. These features do not change the storage limit or inbound-only nature of the service.
- Security display. Message content is shown in the panel using isolated rendering (a closed shadow root with server-sanitised HTML; scripts, iframes, and inline event handlers are stripped server-side and again before display). The Customer may optionally enable loading of remote images through Sinlege's proxy; enabling remote content may display third-party resources and is at the Customer's choice.
- Acceptable use. The Customer must not use Sinbox for spam, phishing, malware distribution, harassment, impersonation of Sinlege staff or systems, receipt of unlawful content, or any activity prohibited under section 10. Reserved or misleading names (for example admin, support) are blocked.
- Suspension and expiry. If the paid period expires without renewal, inbound delivery to the address may be rejected or suspended until renewal. Sinlege may suspend or terminate Sinbox access under section 11 for abuse, non-payment, or legal/security reasons. Expiry or suspension does not by itself delete the locked address assignment until Sinlege reclaims it under its retention rules.
- Renewal window. While a paid period is active, renewal from the panel is available only when seven (7) days or less remain before expiry, unless the panel expressly allows earlier renewal for a given Account. After expiry, the Customer may renew manually to restore service, subject to address still being assigned.
- No email delivery guarantee. Sinbox depends on third-party senders, DNS (MX), network paths, and anti-abuse filtering. Sinlege does not guarantee delivery, latency, or acceptance by all sending domains. Messages filtered as abusive, oversized, or containing disallowed attachments may be rejected or stripped.
- Refunds and withdrawal. Purchased Sinbox periods are non-refundable once performance has begun, except where mandatory consumer law requires otherwise. At activation or renewal, the Consumer must actively confirm in the purchase modal (including an unticked consent control) that they request immediate performance and acknowledge loss of the 14-day withdrawal right once performance has begun, to the extent permitted by Article 38 points 1 and/or 13 of the Act of 30 May 2014 on Consumer Rights. Confirmation is provided on a durable medium as described in section 8.
- Third-party senders. Senders of email to a Sinbox address are third parties not controlled by Sinlege. The Customer is responsible for how they use received codes and for complying with the terms of services that send those messages.