Terms of Service
The contract between PageWard and the organisation using it. Read alongside the Acceptable Use Policy, which forms part of these Terms, and the Privacy Policy.
Last updated: 4 August 2026 · Version 0.1 (draft)
This is a working draft written to be reviewed by an Austrian lawyer, not a document to rely on. It exists so that review starts from a real structure rather than a blank page, and so the gaps are visible. It has not been reviewed by anyone legally qualified.
Fields marked TO FILL need real details, and several clauses record a commercial decision that has not actually been made yet — those are marked DECIDE. PageWard currently operates as a free closed pilot; no fees are charged and no trade licence (Gewerbe) is registered, so the payment sections below are drafted ahead of the fact and take effect only when paid plans open.
1. Who these Terms are with
Jeremy Cabaret, operating PageWard
TO FILL — street and number, postal code, Obertrum am See, Austria
Email: [email protected]
TO FILL — business register number, trade authority and UID, once a Gewerbe is registered
Referred to below as "PageWard", "we" or "us". Full provider identification is in the Impressum.
2. Who may use PageWard
PageWard is a business-to-business service. By accepting these Terms you confirm you are acting in the course of a trade, business or profession, and that you are authorised to bind the organisation you represent.
We do not knowingly offer PageWard to consumers. If a consumer nevertheless enters into a contract with us, mandatory Austrian and EU consumer protection law applies and takes precedence over anything in these Terms that would reduce those rights — including the statutory 14-day right of withdrawal under the Fern- und Auswärtsgeschäfte-Gesetz (FAGG).
You must be at least 18 years old to hold an account.
3. What the service is
PageWard hosts self-contained HTML files and serves them as private web pages, viewable only by the people the uploading account has invited. In outline:
- An authorised user uploads a single self-contained
.htmlfile. - We store it privately and issue a link that renders it live, including its JavaScript.
- The uploader controls an email allowlist per page, and can pause, replace or delete a page at any time.
- The uploader can see a log of who opened the page and when.
The security overview describes how uploaded HTML is isolated, what the product does today, and what it does not.
3.1 Known limitations you are accepting
These are properties of the design, not defects, and they are listed here because they change what PageWard can be used for:
- Single file only. Sidecar files fetched by relative path will not resolve.
- Pages run with an opaque origin. Browser storage APIs throw, and requests to external APIs that do not permit cross-origin access will fail.
- Viewers may be outside your organisation. Whoever owns a page may invite any email address. Access is decided by the page owner, not centrally.
- Uploads are not scanned for malware or for the nature of their contents.
4. Accounts and access
Sign-in is by emailed magic link, and optionally by a password you set. You are responsible for the security of the mailbox that receives your sign-in links — anyone with access to it can sign in as you. Tell us promptly at [email protected] if you believe an account has been compromised.
You are responsible for everything done under your account, and for who you invite to view your pages.
5. Your content
You keep ownership of everything you upload. We claim no rights in your files beyond what is needed to run the service.
You grant us a non-exclusive, worldwide, royalty-free licence to host, store, copy, transmit and display your content solely for the purpose of providing PageWard to you and the people you have authorised. This licence ends when the content is deleted, subject to the backup-retention period described in the Privacy Policy.
You confirm you have the rights necessary to upload what you upload, and that doing so does not infringe anyone else's rights or breach any obligation of confidence you owe.
We do not monitor content proactively. We do not review, approve or endorse what customers publish. We act on notices we receive — see §9 and the Acceptable Use Policy.
6. Acceptable use
The Acceptable Use Policy is incorporated into these Terms by reference and is binding. It sets out what you may not upload or do, how to report abuse, and what we may do in response. A material breach of the AUP is a material breach of these Terms.
Note in particular that PageWard is not designed for special categories of personal data under Art. 9 GDPR — health, biometric, racial or ethnic origin, political opinions, religious beliefs, trade union membership, sex life or sexual orientation — nor for data relating to criminal convictions, payment card data, or classified material. Uploading such data is a breach of the AUP.
7. Availability and support
No service level is promised. PageWard is provided on a reasonable-efforts basis. We may take the service down for maintenance, and we will try to give notice where a planned interruption is significant.
During the current free pilot there is no support commitment and no availability commitment of any kind. PageWard is operated by one person. There is presently no second operator and no documented continuity arrangement — a fact disclosed in the security overview, and one you should weigh before using PageWard for anything you cannot afford to lose access to. Keep your own copy of any file you upload.
Support, where offered, is by email to [email protected].
8. Fees, billing and taxes
PageWard is free during the pilot. This section is drafted for when paid plans open and has no effect until then. DECIDE — trial length, whether a card is required up front, and what happens to live links when a subscription lapses.
- Plans are billed per seat, per month, in advance, at the price shown when you subscribe.
- Prices are stated excluding VAT. VAT is added where applicable. Business customers in other EU member states with a valid VAT identification number are generally invoiced under the reverse-charge procedure and self-account for VAT.
- Adding a seat is charged pro rata for the remainder of the billing period. Removing a seat takes effect at the next renewal.
- Subscriptions renew automatically each period until cancelled. You may cancel at any time, effective at the end of the current paid period. We do not refund unused time in a period already paid for, unless mandatory law requires it.
- If payment fails, we may suspend access after notifying you and allowing a reasonable period to fix it.
- Payments are processed by a third-party payment provider TO FILL — name the provider once selected. We do not receive or store your full card details.
DECIDE — Whether pages stay readable, or are paused, when a subscription lapses. The current intention is that existing links keep serving read-only while uploads and new shares are blocked, but this must be stated definitively before the first sale.
9. Suspension, removal and termination
We may remove or disable access to specific content, or suspend an account, where we have a reasonable belief that it breaches these Terms or the AUP, that it is unlawful, or that it presents a security risk to us or to others. Where the law allows and the circumstances permit, we will give notice first and a chance to put it right.
Where we remove or restrict content, we will provide a statement of reasons to the affected customer, in line with Art. 17 of the Digital Services Act, unless we are legally prevented from doing so. You may contest a decision by writing to [email protected], and we will review it without undue delay.
Either party may terminate for convenience: you by cancelling and deleting your account, us by giving you at least 30 days' notice. Either party may terminate immediately for material breach that is not remedied within 14 days of notice.
On termination, your pages stop serving and your content is deleted in line with the Privacy Policy. Export your content before you terminate. TO FILL — a self-service export feature does not exist yet; until it does, request an export by email before closing your account.
10. Digital Services Act — points of contact
PageWard is a hosting service within the meaning of Art. 3(g)(iii) of Regulation (EU) 2022/2065 (Digital Services Act).
- Point of contact for recipients of the service (Art. 12): [email protected].
- Point of contact for authorities (Art. 11): [email protected]. Communications may be in English or German.
- Notice-and-action mechanism (Art. 16): see the Acceptable Use Policy.
The competent Digital Services Coordinator in Austria is KommAustria.
11. Intellectual property in the service
PageWard, its software, design and brand remain ours. Nothing in these Terms transfers any of it to you. You may not copy, reverse-engineer or attempt to derive the source of the service, except to the extent that mandatory law permits it.
12. Warranties
To the extent permitted by law, PageWard is provided "as is". We do not warrant that it will be uninterrupted, error-free, or that it will render every file faithfully. We specifically do not warrant that the isolation measures described in the security overview are proof against every attack — they are the measures we believe appropriate, and they have not been independently penetration-tested.
13. Liability
Nothing in these Terms excludes liability for death or personal injury caused by negligence, for intent or gross negligence, for fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded — including under the Austrian Produkthaftungsgesetz.
Subject to that:
- We are not liable for slight negligence (leichte Fahrlässigkeit), except for breach of a material contractual duty, in which case liability is limited to foreseeable damage typical for this kind of contract.
- We are not liable for indirect or consequential loss, loss of profit, loss of business or loss of data, except as required by mandatory law.
- Our total aggregate liability in any twelve-month period is limited to the fees you paid us in that period. During the free pilot, no fees are paid, and this cap is therefore zero — a consequence you should read together with §7 before relying on the service.
- You remain responsible for the content you upload and for the consequences of who you share it with.
DECIDE — Whether to carry professional indemnity / cyber insurance before charging. A liability cap set at fees paid is standard, but it is only credible to an enterprise buyer if there is something behind it.
14. Data protection
Where we process personal data contained in your uploaded content, allowlists and view logs, we act as your processor and you act as the controller. That relationship is governed by the Data Processing Agreement, which forms part of these Terms.
Where we process your account, billing and security-log data for our own purposes, we act as controller. See the Privacy Policy.
15. Changes to these Terms
We may update these Terms as the service develops. We will give at least 30 days' notice by email of any change that materially disadvantages you. If you do not accept the change, you may terminate before it takes effect; continuing to use PageWard after that date means you accept it.
16. Governing law and jurisdiction
These Terms are governed by Austrian law, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods.
For disputes with business customers, the courts competent for TO FILL — Salzburg, Austria, subject to confirmation, have exclusive jurisdiction. If a consumer is party to the contract, the statutory rules on jurisdiction apply instead and are unaffected by this clause.
17. Miscellaneous
- If any provision is found invalid, the rest remains in force and the invalid provision is replaced by one that comes closest to its commercial intent.
- You may not assign these Terms without our written consent. We may assign them to a successor of the business, on notice to you.
- These Terms, the AUP, the DPA and the Privacy Policy are the entire agreement between us on their subject matter.
- Failure to enforce a provision is not a waiver of it.
18. Contact
General and contractual: [email protected]
Data protection: [email protected]
Security reports: [email protected]
Illegal content and abuse: [email protected]
TO FILL — none of the addresses above currently receives mail. They must exist before these Terms are published, because several of them are commitments to be reachable that both the GDPR and the DSA impose independently of any contract.