FORGEMESH x402 ADS — TERMS OF SERVICE & DATA DISCLOSURE Version 1.1 — 2026-07-03 Operated by ForgeMesh ("we", "us"). By installing the @forgemeshlabs/x402-ads middleware, calling this API, or holding a publisher key, you ("publisher", "user") agree to these terms. 1. WHAT THE SERVICE IS A recommendations and intent-analytics network for x402 services. Publishers install middleware that (a) injects a "recommendations" block into their HTTP 402 response bodies and (b) reports anonymized request metadata to this server. Aggregate analytics are sold via x402 micropayments. Sponsored placements may appear among recommendations. 2. DATA WE COLLECT (COMPLETE LIST) For each reported event: service identifier (bound at registration), request path, HTTP method, response status code, user-agent string, optional price string, optional category label, and a timestamp. Separately, direct calls to our own API (ads.forgemesh.io) are subject to standard rate limiting using a salted one-way hash of the caller's IP; those hashes are never linked to publisher-reported events. 3. DATA WE DO NOT COLLECT We never receive or store: request bodies, response bodies or payloads, API keys, wallet addresses or private keys, payment headers or signatures, cookies, or any end-user personal data. The IP addresses of a publisher's clients are never transmitted by the middleware in any form — raw or hashed (middleware v0.2.0+). The middleware transmits request METADATA only. Response content returned by a publisher's API never leaves the publisher's server. 4. HOW DATA IS USED a. Publisher's own analytics: publishers access reports about services they contribute data for at no charge, using their publisher key. b. Aggregate products: pooled, classified data powers network-level analytics (trends, category demand, network stats). Aggregates never identify an individual publisher beyond its public service identity, and never expose data beyond what an external observer could measure by probing the public endpoint. c. Recommendations: event context (path, category) selects which recommendations are returned. We do not sell or transfer publisher-identifiable raw event data to any third party. 5. OPT-OUTS The middleware supports reportEvents:false (inject recommendations, report nothing) and injectRecommendations:false (report only). Removal: uninstall the middleware; on written request we will delete a publisher's raw event rows within 30 days. 6. PUBLISHER OBLIGATIONS You confirm you operate the services you report events for, that your own terms and applicable law permit sharing the metadata in Section 2, and that you will not report falsified, manipulated, or synthetic traffic. We may suspend keys and withhold earnings for fraudulent traffic, artificial inflation of impressions or clicks, or spam. 7. RECOMMENDATIONS AND THIRD-PARTY SERVICES Recommended, sponsored, and similar services are independent third parties. A recommendation is NOT an endorsement, warranty, or guarantee of any service's quality, availability, safety, legality, or fitness for purpose. Transactions between agents and recommended services are solely between those parties. Sponsored items are paid placements and are labeled with type "sponsored". 8. ANALYTICS ARE INFORMATIONAL ONLY Reports, trends, classifications (including monitor/indexer/agent labels), and demand estimates are statistical inferences provided for informational purposes only. They may be incomplete or wrong. They are not financial, investment, business, or legal advice. Classification of any client as a "monitor" or "agent" is a heuristic, not a fact. 9. NO EARNINGS GUARANTEE Participation may generate no revenue. Referral or revenue-share programs, where offered, are discretionary, may change with notice, and accrue only per the then-current published schedule. 10. SERVICE PROVIDED "AS IS" THE SERVICE, MIDDLEWARE, DATA, AND RECOMMENDATIONS ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR UPTIME. WE MAY MODIFY, SUSPEND, OR DISCONTINUE ANY PART OF THE SERVICE AT ANY TIME. 11. LIMITATION OF LIABILITY TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR BUSINESS OPPORTUNITY, ARISING FROM OR RELATED TO THE SERVICE. OUR TOTAL AGGREGATE LIABILITY FOR ANY CLAIM SHALL NOT EXCEED THE GREATER OF (A) AMOUNTS YOU PAID US IN THE TWELVE MONTHS PRECEDING THE CLAIM OR (B) TEN US DOLLARS ($10). 12. INDEMNITY You will indemnify and hold us harmless from claims arising out of your services, your use of the network, your violation of these terms, or your violation of applicable law or third-party rights. 13. PAYMENTS Paid endpoints settle via the x402 protocol in USDC on Base mainnet. Blockchain settlements are final; no refunds for completed micropayments except where required by law. 14. CHANGES We may update these terms; the current version is always served at /terms with its version string. Continued use after changes is acceptance. 15. CONTACT clawdbotworker@gmail.com