Legal Documents
1. Acceptance of These Terms
These Terms of Use ("Terms") are a binding agreement between you and MUD Foundation Inc., a Florida nonprofit corporation ("MUD Foundation," "we," "our," or "us"), governing your access to and use of our website (including www.mud.foundation), our applications, and our XR “Metaverse as a Service” platform and related services (together, the "Services").
You accept these Terms when you create an account, click to indicate your agreement, or otherwise access or use the Services. If you do not agree, do not use the Services. If you are using the Services on behalf of an organization, you represent that you are authorized to bind that organization.
2. Definitions
Programs are MUD Foundation's initiatives, exhibitions, workshops, camps, and events (Media Under Dystopia, XRCamp, WISPer, Sound Art, MUDAO). Program Content is work created as a deliverable of a Program (Section 5). Community Content is work you create independently using the Services (Section 5). The XR Platform/Services means MUD Foundation's device-agnostic XR ecosystem, including MUD Verse, XR Creator Studio, the runtime, and related tools. Premium Services are paid tiers offered under separate terms. A Workspace is a collaborative space managed by administrators such as an educator, partner, or institution. Instant Access lets a Workspace administrator invite temporary users via a shared link and access code, without full registration or an email address.
3. Eligibility, Minors, and Accounts
You must be at least 13 to use the Services on your own. Users aged 13–17 may use the Services only with the involvement and verifiable consent of a parent or legal guardian, who accepts these Terms on their behalf. The self-serve Services are not directed to children under 13, and we do not knowingly allow them to create accounts; children under 13 may participate in Programs only through a supervised arrangement with a parent/guardian, school, or partner that provides any consent required by law. Where students or minors take part through a Workspace or an Instant Access link created by an educator or partner, that administrator and their organization are responsible for having authority to invite them and for obtaining any parent/guardian or school consent required by law (including under COPPA and FERPA, where applicable). You are responsible for activity under your account.
4. License to Use the Services
Subject to these Terms, MUD Foundation grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Services for personal, educational, artistic, or organizational purposes consistent with our nonprofit mission. No ownership rights in the Services are transferred to you, and we reserve all rights not expressly granted.
5. Intellectual Property: Program Content vs. Community Content
MUD Foundation is artist-run and treats creators' rights seriously; ownership depends on how and why a work was created. Community Content — work you create independently, outside the defined deliverables of a Program — remains yours, and by making it available on the platform you grant MUD Foundation the limited marketing license in Section 6. Program Content — work created as a defined deliverable of a Program — is governed by that Program's written agreement; where there is none, the default is that the creator keeps ownership and grants MUD Foundation a license for the Program's stated purposes. MUD Foundation does not claim ownership of a participant's work merely because it was made during a Program, and any transfer or co-ownership of IP must be set out in a signed writing identifying the specific work. You must have rights to anything you upload; MUD Foundation's names, logos, and platform materials remain MUD Foundation's.
6. License to Use Community Content for Nonprofit Outreach
By publishing Community Content on the platform, you grant MUD Foundation a worldwide, royalty-free, non-exclusive license to display, reproduce, share, and distribute that content (without selling it) for community engagement, nonprofit outreach, education, and mission-related marketing. Where reasonably practical, MUD Foundation will credit you as the creator. If you delete Community Content or your account, MUD Foundation will stop new uses within a reasonable time, though copies already incorporated into distributed materials may persist and backups clear on our normal cycle.
7. Free and Premium Services
MUD Foundation offers free access to core community Services and may offer Premium Services such as enhanced XR experiences, workshops, exhibitions, or subscriptions. Pricing, availability, and restrictions for Premium Services are published separately and may be governed by additional terms.
8. Acceptable Use
You agree not to upload or share unlawful, defamatory, harassing, obscene, infringing, or harmful content; impersonate any person or misrepresent your affiliation; attempt unauthorized access to the Services, other accounts, or our systems; or interfere with or disrupt the Services. Violations may result in suspension or termination under Section 14.
9. Your Content and Indemnification
You are responsible for content you create, upload, or share. To the extent permitted by law, you agree to indemnify and hold MUD Foundation harmless from third-party claims, damages, and reasonable expenses arising from content you upload, your breach of these Terms, your violation of law or of another person's rights, or your infringement of intellectual property.
10. Health, Safety, and XR Experiences
Please read this carefully. Virtual and augmented reality can cause discomfort or injury, including motion sickness, dizziness, disorientation, rare seizures, eye strain, emotional responses, and physical injury from collisions with real-world objects while wearing a headset. Use the Services in a clear, safe space, take breaks, stop if you feel unwell, and supervise minors using XR.
You acknowledge these risks and agree to use XR features responsibly. This online acknowledgment is not a substitute for a signed waiver: for in-person Programs and events, MUD Foundation uses separate participation and waiver forms, and parent/guardian forms for minors. Nothing here limits any liability that cannot be limited under Florida law, including for gross negligence or willful misconduct, and waivers of a minor's claims are subject to the limits of Florida law.
11. Privacy and Data Roles
MUD Foundation handles personal data as described in our Privacy Policy, which is incorporated into these Terms. If you use the Services to collect or manage other people's personal data (for example, as a Program organizer or partner), you are responsible for complying with applicable privacy laws for that data, and you and MUD Foundation may need a separate data-processing arrangement defining each party's role.
Workspace administrators: if you create a Workspace or an Instant Access link and invite others (including students), you are responsible for the users you invite — for having authority to invite them, for providing any legally required notice and consent (including parent/guardian or school consent for minors), and for managing and revoking their access. You acknowledge that you can view the display names and access codes of users who join through your links, and you agree to handle that information responsibly.
12. Changes to the Services
The MUD Foundation platform is under continuous development. We may add, modify, suspend, or discontinue features or parts of the Services. We will give reasonable notice of material changes that significantly reduce functionality where we can. We are not liable for routine modifications, but this does not waive any liability that cannot be waived under applicable law.
13. Disclaimers and Limitation of Liability
Except where prohibited by law, the Services are provided "as is" and "as available," without warranties of any kind, express or implied (including merchantability, fitness for a particular purpose, and non-infringement). To the maximum extent permitted by law, MUD Foundation's total liability for all claims relating to the Services is limited to the greater of the amount you paid MUD Foundation in the 12 months before the claim or USD $100. These limits do not apply to liability that cannot be limited under applicable law, including (where applicable) bodily injury caused by MUD Foundation's negligence, gross negligence, willful misconduct, or MUD Foundation's own infringement of a third party's IP. Some jurisdictions do not allow certain disclaimers or limitations; in those places these provisions apply only to the extent permitted.
14. Suspension and Termination
We may suspend or terminate your access, with notice where reasonably practical (and immediately where necessary to prevent harm), if you violate these Terms, your actions create legal or safety risk for MUD Foundation or others, or continuing the Services is no longer operationally or financially feasible for MUD Foundation as a nonprofit. You may stop using the Services at any time. Sections that by their nature should survive termination — IP, disclaimers, limitation of liability, indemnification, and dispute resolution — survive.
15. Dispute Resolution
Please contact us first at info@mud.foundation so we can try to resolve any dispute informally. Except as stated below, disputes relating to these Terms will be resolved by binding arbitration administered by the American Arbitration Association under its applicable consumer rules, seated in Miami-Dade County, Florida. Either party may instead bring a qualifying individual claim in small-claims court. You may opt out of arbitration by emailing info@mud.foundation within 30 days of first accepting these Terms. For claims brought by an individual community user, MUD Foundation will pay AAA filing and arbitrator fees beyond any small filing fee to the extent required for the clause to be enforceable. To the extent permitted by law, disputes are resolved individually and class or class-wide proceedings are not permitted.
16. Changes to These Terms
We may update these Terms. We will post the updated version with a new "Last Updated" date, and for material changes we will provide reasonable advance notice (for example, a notice on the platform or by email where we have it). Changes are not retroactive. Your continued use after the effective date of an update means you accept it; if you do not agree, stop using the Services.
17. Governing Law and Venue
These Terms are governed by the laws of the State of Florida, without regard to conflict-of-law principles. Disputes not subject to arbitration will be heard exclusively in the state or federal courts located in Miami-Dade County, Florida, and you consent to that venue.
18. Copyright / DMCA Notices
MUD Foundation respects intellectual property rights. If you believe content on the platform infringes your copyright, send a notice with the information required by the Digital Millennium Copyright Act to our designated agent at MUD Foundation Inc., 350 Northeast 75th Street, Unit 360-123, Miami, FL 33138, USA; contact info@mud.foundation. We will respond to valid notices, including by removing infringing content, and may terminate repeat infringers.
19. Entire Agreement; Severability; Miscellaneous
These Terms and the Privacy Policy are the entire agreement between you and MUD Foundation regarding the Services and supersede prior versions. If any provision is held unenforceable, the rest remains in effect, and the unenforceable provision is modified to the minimum extent needed to make it valid. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them to a successor (for example, in a nonprofit merger or restructuring).
20. Contact
MUD Foundation Inc., 350 Northeast 75th Street, Unit 360-123, Miami, FL 33138, United States. Email: info@mud.foundation.
Introduction
MUD Foundation Inc. is a Miami-based 501(c)(3) nonprofit. This Privacy Policy explains what information we collect, how we use and share it, and your choices, when you use our website (including www.mud.foundation), applications, XR platform, and related services, sales, marketing, or events. Questions: info@mud.foundation. If you do not agree with this Policy, please discontinue use of the Services.
1. What Information Do We Collect?
Automatically: IP address, browser and device characteristics, operating system, language preferences, and usage data, via cookies and similar technologies. From you: when you create an account, register for a Program, contact us, or donate, we may collect your name, email, account credentials, organization, and your communications; payments and donations are handled by third-party processors and we do not store full card numbers. From apps and devices (with permission where required): geolocation, device data, push-notification preferences, and access to features such as camera or storage that a feature needs.
2. Information from Accounts and Programs
For Program participation (including youth programs such as XRCamp), we may collect enrollment information and, for minors, parent/guardian or institutional consent and contact details. Where a school or partner enrolls participants, we may receive information from that organization under its arrangement with us.
2A. Instant Access (Temporary Workspace Users)
Some workspaces offer Instant Access, which lets you join without registering a full account or providing an email. Instant Access is account-light, not anonymous. When you join through an Instant Access link, we collect and store the display name you enter (which may be your real name), the access code associated with your temporary user, and your workspace activity plus the technical and immersive data described in Sections 1 and 3. The workspace administrator who created the link (for example, an educator or partner) can see the display names and access codes of users who joined, can remove individual users, and can revoke access for everyone on that link; revoking removes the associated connections and access to assets. Because Instant Access is often used with students, the administrator (and, for minors, a parent/guardian or school) is responsible for providing any consent the law requires before inviting users.
3. Immersive / XR Data
Our platform runs in the browser using the WebXR standard, and there is an important difference between what your headset and its operating system capture and what our web application receives. To make XR work, our platform receives motion and pose data (the position and orientation of your headset and hand controllers, used in real time to render your viewpoint and avatar), avatar and room activity (your avatar name and appearance, position in a space, and interactions, shared with others in the same space; rooms accessible by link may be viewable by anyone with the link), voice (if your microphone is on, your audio is transmitted to others to enable real-time communication — we do not record or store it), and content you create or upload.
What our platform does not receive: under WebXR, sensitive capabilities such as eye tracking, facial-expression tracking, hand-joint tracking, and detailed spatial mapping of your room are protected and available only to an application that specifically requests them and that you permit. Our platform does not capture or create facial-recognition, fingerprint, or other biometric data, and does not request or receive eye-tracking or facial data, consistent with MUD Foundation's vendor security assessment. Your VR/AR headset and its operating system (for example, devices from Meta or Apple) may collect their own sensor and biometric data under their privacy policies, which we do not control. Even basic motion data can in some cases be distinctive to an individual; we use it to operate the Services, not to identify or profile you, and we do not sell it.
4. How Do We Use Your Information?
We use information to create and manage accounts; deliver and operate the Services and XR experiences; run and administer Programs; respond to inquiries and provide support; process donations and any paid Services; send communications you've asked for or that relate to your account or Programs; improve and develop the Services; and maintain security and comply with law. We may anonymize or aggregate data for analytics. For users in the EU/EEA, we rely on legal bases such as performance of a contract, consent, legitimate interests, and legal obligation.
5. Will Your Information Be Shared?
We do not sell your personal information. We share it only with service providers under contract who help us operate (for example, cloud hosting on Microsoft Azure, Cloudflare, Auth0 authentication, analytics, email/communications, and payment/donation processing), limited to what they need; with your consent, including content you choose to make public or share in a space; to comply with law or lawful requests and to protect the rights, safety, and property of MUD Foundation, our users, and the public; and in a nonprofit transaction such as a merger, affiliation, or transfer of a Program, where we will seek to ensure the recipient honors this Policy.
6. Cookies and Tracking Technologies
We use cookies, pixels, and similar technologies to operate the site, remember preferences, measure usage, and improve the Services. You can manage cookies through your browser settings. If MUD Foundation has EU/EEA users, non-essential cookies require prior consent through a consent banner with an easy way to refuse and withdraw.
7. Social Logins
If you register or log in through a third-party account (for example, Google or Facebook), we receive limited profile information from that provider, per the provider's terms and your settings with them, and use it as described in this Policy.
8. Children's and Minors' Information
MUD Foundation's mission includes art-and-technology education for young people, so minors do participate in some Programs, but our self-serve Services are intended for users 13 and older. We do not knowingly let children under 13 create self-serve accounts; under-13 children participate only through a parent/guardian, school, or partner arrangement that provides any legally required consent, and we limit collection to what the activity needs. Minors aged 13–17 should use the Services only with parent/guardian involvement and consent. Where students take part through a workspace (for example, an Instant Access link created by an educator), the school or educator acts as the responsible party, and we typically receive only a display name, an access code, and activity data — not an email; when this involves student education records handled on behalf of a school we support the school's FERPA compliance, and for children under 13 school or parental consent must be in place consistent with COPPA. If we learn we collected a child's information without required consent, we will delete it promptly.
9. How Long Do We Keep Your Information?
We keep personal information only as long as needed for the purposes in this Policy or as required by law (for example, tax and nonprofit records). As general guidance: account information for the life of your account, then deleted or anonymized within a reasonable period after closure; real-time XR voice is transmitted, not stored, and motion/pose data is used live and not retained as a personal record; uploaded content until you remove it or close your account, subject to normal backups; Instant Access display name, access code, and connections are removed when an administrator revokes access or the link; and support and transactional records as needed for the matter and any legal retention period. Backups are retained on a 30-day cycle.
10. How Do We Keep Your Information Safe?
We use reasonable technical, administrative, and organizational safeguards. The platform is hosted on Microsoft Azure in U.S. data centers and protected by Cloudflare and Auth0; data is encrypted in transit (TLS 1.2/1.3) and at rest (AES-256); and backups are geo-redundant with a 30-day retention period. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please protect your account credentials and Instant Access codes.
11. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; to object to or restrict certain processing; and to withdraw consent (which does not affect prior processing). To exercise these rights, email info@mud.foundation. We will respond as required by applicable law and will not discriminate against you for exercising your rights. EU/EEA residents also have the right to lodge a complaint with their data protection authority; the controller is MUD Foundation Inc.
12. Do-Not-Track Signals
Because there is no common industry standard for Do-Not-Track signals, we do not currently respond to them. We will update this section if a standard is adopted.
13. California Residents
As a nonprofit, MUD Foundation is generally not subject to the CCPA/CPRA, which apply to qualifying for-profit businesses. Where we can, we extend comparable choices to California residents as a matter of practice: you may request access to or deletion of your personal information, and California minors under 18 may request removal of content they posted publicly. To make a request, email info@mud.foundation.
14. International Data Transfers
We are based in the United States, and our service providers may process information in the United States. If you access the Services from outside the U.S., you understand your information may be transferred to and processed in the U.S. If MUD Foundation has EU/EEA users, we will identify a lawful transfer mechanism (such as Standard Contractual Clauses) with our processors.
15. Updates to This Policy
We may update this Policy to reflect changes in law, technology, or our practices. We will post the updated version with a new "Last Updated" date and may highlight significant changes through a notice on the platform or by email.
16. How to Contact Us
MUD Foundation Inc., 350 Northeast 75th Street, Unit 360-123, Miami, FL 33138, United States. Email: info@mud.foundation.
