Terms of Service

These Terms of Service (“Terms”) apply to your use of the PQC Today website at www.pqctoday.com (the “Platform”). If you do not agree to these Terms, do not use the website.

The source code in the Platform's GitHub repositories is not governed by these Terms. Your rights to use, copy, modify and distribute it come from its licence (section 2), and these Terms add no conditions to it.

The Platform's source code is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0-only), with a commercial licence on request. The full license text is available in the LICENSE file. Nothing in these Terms restricts rights granted under the AGPL-3.0.

The Platform is an educational and research tool for post-quantum cryptography (PQC). All cryptographic operations — including key generation, signing, verification, encryption, decryption, and key encapsulation — are performed client-side in your browser using WebAssembly (WASM) and are intended for educational and demonstration purposes only.

In short: this is a demo, not a certified crypto library — never use keys it generates to protect anything real.

Disclaimer:

• The Platform is not certified. Keys it generates are not suitable for protecting production systems, real data, or financial transactions.
• The Platform is not a substitute for professionally audited cryptographic implementations.
• Assessment results, migration recommendations and compliance guidance are educational information, not professional legal, security, or regulatory advice.

When using the website, you agree not to:

• Use it for any unlawful purpose or in violation of any applicable laws or regulations.
• Present the website as your own creation.
• Attempt to compromise, disrupt, or interfere with its infrastructure or other users' access.
• Scrape, crawl, or harvest data from it in a manner that degrades service for other users.

PQC Today, LLC does not endorse use of the Platform to develop weapons, conduct surveillance, or violate human rights.

The Platform is provided “as is” and “as available” without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement.

This is consistent with Sections 15 and 16 of the AGPL-3.0 license.

The Platform aggregates data from public sources including NIST, ETSI, IETF, BSI, ANSSI, ISO/IEC, and others. Content may be inaccurate, incomplete, or outdated. You should independently verify all information before making decisions based on it.

To the maximum extent permitted by law, the maintainers, contributors, and affiliates of PQC Today shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, data, or goodwill, arising from your use of or inability to use the Platform.

The Platform references and aggregates content from third-party organizations including but not limited to:

• NIST — National Institute of Standards and Technology
• ETSI — European Telecommunications Standards Institute
• IETF — Internet Engineering Task Force
• BSI — Bundesamt für Sicherheit in der Informationstechnik
• ANSSI — Agence nationale de la sécurité des systèmes d'information
• ISO/IEC — International Organization for Standardization
• Common Criteria (CCRA)

The Platform is not affiliated with, endorsed by, or sponsored by any of these organizations. All trademarks, service marks, and trade names are the property of their respective owners.

• The Platform's source code is licensed under AGPL-3.0-only.
• Original educational content, data compilations, and visualizations are copyright of the PQC Today maintainers.
• Third-party standards, specifications, and documents referenced by the Platform are subject to their respective licenses and copyright terms.

The Platform has no user accounts and no login credentials, and no server of its own that processes your data. All cryptographic operations and assessments run entirely in your browser using client-side WebAssembly.

We use Google Analytics 4 (GA4) on every visit. It starts when a page loads, and the Platform has no consent prompt or on/off switch yet. GA4 collects anonymous usage data: page views, aggregated interaction events (e.g., which learning modules are started or completed, and searches, with the text you type scrubbed of email addresses, web addresses, IP addresses and long key-like strings), and basic browser details such as language and screen size. GA4 sets cookies that give your browser a random identifier so repeat visits can be counted. The page address we send has nothing after a “?” or “#”. Two automatic GA4 features (site search and navigation tracking) read the browser's own address instead, and can record text after a “?”, such as a search term or the data in a shared-report link. Google also receives your IP address when your browser sends these events. We do not send names, email addresses or account details. Analytics are disabled entirely when the Platform is accessed on localhost.

To stop analytics, block them in your browser: use a content blocker that blocks Google Analytics requests (google-analytics.com), block cookies for this site, or install Google's opt-out browser add-on.

For details on how Google processes analytics data, see Google's Privacy Policy.

The Platform's PQC Assistant chat feature offers two modes. When using Google Gemini Flash, your chat messages and page context are sent to Google's servers for processing. You must provide your own Google AI API key to use this mode. Your API key is stored locally in your browser and is never transmitted to PQC Today's infrastructure. Google's use of data sent via the Gemini API is governed by Google's Gemini API Terms of Service. Alternatively, you can use the Local LLM (WebLLM) mode, which runs the AI model entirely in your browser — no data leaves your device.

Local browser storage (localStorage) keeps your learning progress, preferences, saved assessments and, if you add one, your AI provider key on your device. We do not receive it. It leaves your browser only if you share a report link or use the Gemini cloud mode described above.

We reserve the right to modify these Terms at any time. Changes will be indicated by updating the “Last Updated” date. Continued use of the Platform after changes constitutes acceptance of the modified Terms.

These Terms are governed by and construed in accordance with the laws of the State of Texas, United States, without regard to its conflict of law provisions.

For questions about these Terms, please open a discussion on GitHub Discussions or contact the maintainers through the repository.