Terms and conditions
Version: 15 October 2026
1. Operator and contact
- Legal operator name
- Ondra Vaniš
- Postal address
- Via Vedò 20, 6963 Pregassona, Switzerland
- Contact email
- info@asauser.app
AsAUser.app is operated by the private individual identified above. Use the contact email for service, legal, privacy and account-removal requests.
2. Scope and agreement
AsAUser.app helps users write, organise, and collaborate on user stories. These terms apply where they have been made available and validly accepted as part of an agreement. Browsing the website or public collections does not itself create a paid subscription.
If you act for an organisation, you must be authorised to enter into the relevant agreement. Mandatory legal rights take precedence over these terms.
3. Demo, public collections, and private collections
The demo requires no account. Demo stories remain in the current browser tab and are cleared when the page is refreshed or closed. The demo does not save, export, or import stories.
Public collections are free. Anyone can read and export their content. An account and collection membership are required to contribute. Public collections do not support story import. Do not place confidential information in a public collection.
Private collections require an account and collection membership. Contributors can save, export, and import stories, subject to their permissions and subscription access. Global service administrators retain operational access.
4. Accounts and collaboration
Keep your account details accurate and protect your sign-in credentials. Use only provider accounts you are authorised to use. Notify the operator if you suspect unauthorised access.
Contributors manage the stories and actors they own. Collection administrators manage the collection and its members. At least one activated collection administrator must remain. These permissions control editing access and do not transfer copyright ownership.
You are responsible for the content you add and for having the necessary rights to upload, share, or import it. Using the service for unlawful content, infringement, harassment, unauthorised access, or interference with the service is strictly prohibited and constitutes a breach of these terms.
5. Private-collection subscriptions
The collection owner pays CHF 1 per month per private collection, rather than per contributor. A paid subscription starts only after the owner confirms a recurring payment order in checkout and the order is accepted. Review the price, billing frequency, and order details before confirming payment, and correct any mistakes first.
Subscriptions renew monthly until cancelled. The payment provider processes payment details. Keep the payment confirmation supplied by your payment provider. Changing a public collection to private does not itself authorise a charge.
Members can read existing private-collection stories after paid access ends. Adding or changing stories, import, export and invitations require active paid access. The subscription price is shown before payment; mandatory price and tax-disclosure requirements remain applicable.
6. Cancellation and refunds
Manage or cancel a subscription through the subscription-management option in the collection, or contact the operator if you cannot use it. The effective cancellation date and any remaining access are determined by the subscription information presented when cancellation is confirmed. Cancellation stops future renewal charges from its effective date.
Swiss law does not generally provide a cooling-off right solely because a purchase was made online. Any mandatory withdrawal, refund, or consumer rights that apply to you remain unaffected. Refund requests should be addressed to the operator and will be assessed under the contract and applicable law; these terms do not promise an automatic prorated refund.
Account removal cancels active subscriptions and pending checkout before deleting owned collections. If cancellation cannot be confirmed, the account is kept so removal can be retried. Subscription cancellation alone does not delete collaborative content.
7. Your content and exports
You retain the rights you hold in your content. You permit the operator to store, display, and process it as needed to provide the service and the sharing settings you select. Making a collection public allows public viewing and export, but does not automatically grant a separate licence to reuse copyrighted material.
Imports create independent stories with new identifiers and can replace existing stories only when that option is explicitly selected and permitted. Keep your own copies of important content. Removing your account permanently deletes all collections you own and their contents, including other contributors’ work. Contributions in collections owned by others remain under John Doe with account references removed. Ownership is not transferred automatically. Copies already exported by others cannot be recalled.
8. Privacy and security
Account details, memberships, user content, security records, and subscription records are processed to operate the service, administer contracts, and prevent misuse. Essential session cookies keep you signed in, and language preferences may be stored on your device. External sign-in and payment providers also process information under their own terms and privacy policies.
The Privacy notice explains the data we process, service providers, international processing, retention and your rights. Contact the operator for access, correction or removal requests. Required accounting records and expiring provider backup/log copies are exceptions to immediate removal.
8a. How passwords are handled
We store passwords as one-way hashes, not as readable passwords or reversibly encrypted copies. As of 15 October 2026, password hashing uses scrypt with N=32768, r=8 and p=3, a unique salt generated from 32 cryptographically random bytes for each password, and a 32-byte derived hash. The salt and hashing parameters are stored alongside the hash. Passwords are normalised using Unicode NFC before hashing and verification.
Signing in checks the password against the stored hash using a constant-time comparison. Application logs and account emails do not contain passwords. If you forget your password, an expiring, single-use reset link lets you choose a new one; the service does not email your existing password.
When you set or change a password, we reject common, predictable and known-compromised values. The Pwned Passwords check sends only the first five hexadecimal characters of a SHA-1 hash of the password to the checking service and compares the returned candidates locally. Your password, full SHA-1 hash, stored scrypt hash and email address are not sent to that service. SHA-1 is used only for this lookup, never for password storage.
If you sign in through an external provider, that provider handles its own password under its own security and privacy policies.
9. Service operation and liability
The service is provided as-is and as available, without contractual guarantees of availability, reliability, fitness for a particular purpose or preservation of data. Maintenance, incidents and third-party services can affect access. The operator may change or discontinue the service or restrict misuse, subject to mandatory law and existing contractual obligations.
To the fullest extent permitted by law, the operator excludes liability for losses arising from use of, or inability to use, the service, including lost data or profits. This exclusion does not apply to intentional misconduct, gross negligence or liability and rights that cannot lawfully be excluded.
10. Changes and applicable law
New versions of these terms will be dated and made accessible. Material contractual changes must be validly incorporated into the agreement; publication alone does not retrospectively change an existing paid billing period.
Swiss substantive law governs agreements that validly incorporate these terms, subject to mandatory protections that cannot be displaced by a choice of law. Disputes are handled by the courts competent under applicable law. Mandatory consumer jurisdiction and other non-waivable rights remain unaffected.
11. Logo and illustration credits
The AsAUser.app user mark is adapted from OpenMoji U+1FBC7, created by the OpenMoji contributors. Changes include a cropped viewBox, heavier strokes, an orange torso, and a purple head. The workflow illustrations add a spyglass, a butterfly net, and juggling shapes. These adaptations were made for AsAUser.app.
The original graphic and these adapted SVG graphics are licensed under Creative Commons Attribution-ShareAlike 4.0. This graphic licence does not automatically apply to user stories or the application code.
