AirCode Ø Marketplace Acceptable Use & Prohibited Content Policy

Version 1.0 — effective September 4, 2026.

This Acceptable Use & Prohibited Content Policy (the “Policy”) applies to every app, Marketplace listing, publisher profile, image, link, donation destination, and other material submitted to or made reachable through AirCode Ø Marketplace (together, “Marketplace Content”). It forms part of the AirCode Ø Marketplace Publisher Agreement.

The Marketplace is operated by Spartacus lab SARL, a Swiss limited liability company with its registered address at 32 route du Vallon, 1224 Chêne-Bougeries, Switzerland (“Spartacus lab”, “we”, “us”, or “our”).

By submitting or publishing Marketplace Content, a publisher accepts the exact version of this Policy identified in the publication record. If the publisher does not accept it, the publisher must not submit or publish the Marketplace Content.

1. Scope and publisher responsibility

Publishers are responsible for their Marketplace Content and for the behavior, security, legality, disclosures, and continued operation of each app they make available. This Policy applies both to the representation submitted for review and to later changes made on the publisher’s machine after publication.

A publisher must not use a redirect, embedded third-party service, download, later update, or materially different post-review experience to do anything that this Policy prohibits directly.

2. Malware and harmful behavior

Marketplace Content must not:

• contain, deliver, promote, or facilitate malware, spyware, ransomware, cryptojacking, destructive code, exploit kits, remote-access tools used without informed authorization, or other code intended to compromise a visitor, device, account, network, or data;
• exploit or attempt to exploit a browser, operating system, device, extension, wallet, or other software;
• initiate or disguise a forced, deceptive, or unexpected download;
• interfere with security controls, conceal malicious behavior, evade safety inspection, or instruct a visitor to disable a security warning; or
• use a visitor’s device or resources for an undisclosed purpose.

3. Phishing, credentials, fraud, and scams

Marketplace Content must not:

• impersonate a login, support, payment, identity-verification, wallet, banking, exchange, government, employer, or other trusted flow to obtain information or assets deceptively;
• request, collect, transmit, retain, or expose passwords, recovery phrases, one-time codes, private keys, access tokens, payment credentials, or other authentication secrets without a legitimate, clearly disclosed purpose and appropriate safeguards;
• facilitate phishing, credential harvesting, wallet draining, advance-fee fraud, investment fraud, payment diversion, fake support, deceptive billing, or another scam;
• misrepresent a donation recipient, seller, price, subscription, purchase term, refund term, app capability, availability, affiliation, endorsement, or expected outcome; or
• direct a visitor to a materially different or deceptive destination.

4. Illegal content and conduct

Marketplace Content must not be illegal in the place where it is offered or used, and must not promote, solicit, coordinate, or materially facilitate illegal conduct. This includes, without limitation:

• child sexual abuse material, sexual exploitation of children, or grooming;
• terrorist content or material that unlawfully incites or assists terrorism;
• unlawful threats, stalking, harassment, trafficking, exploitation, or non-consensual intimate material;
• unlawful sale, acquisition, or distribution of controlled goods or services;
• infringement of copyright, trademark, privacy, publicity, database, trade secret, or other rights; and
• unlawful discrimination or content whose publication is prohibited by applicable law.

Publishers must comply with sanctions, export-control, consumer-protection, advertising, gambling, financial-services, health, and other laws that apply to their app and audience. Publication in the Marketplace is not a licence or regulatory approval.

5. Impersonation and misleading identity

Marketplace Content must not impersonate or create a likelihood of confusion with another person, organization, publisher, product, service, bank, exchange, government body, or AirCode Ø. A publisher must not falsely claim sponsorship, certification, partnership, verification, ownership, or endorsement.

A publisher may make truthful nominative or comparative references where the publisher has the necessary rights and clearly identifies the independent nature of the app.

6. Privacy and data collection

Before collecting personal data or sensitive information, an app must give the visitor a clear, accurate, and readily accessible disclosure inside the app that explains at least who is collecting the data, what is collected, why it is collected, where it is sent, how long it is retained, and how the visitor can exercise applicable rights.

Marketplace Content must not:

• collect or transmit personal data, device data, form values, files, credentials, financial data, health data, precise location, contacts, or communications without clear disclosure and a lawful basis;
• claim that no data is collected when the app or an embedded third party does collect it;
• use deceptive consent, dark patterns, hidden tracking, or a disclosure that is materially incomplete or inconsistent with actual behavior;
• collect more data than is reasonably necessary for the disclosed purpose; or
• expose, sell, share, or otherwise process data in violation of applicable law or the app’s own disclosures.

The publisher declaration made during Marketplace submission must remain accurate. A material change to data collection requires an updated in-app disclosure and a Marketplace update where the submitted representation is no longer accurate.

7. Rights, accuracy, and review integrity

A publisher must have all rights, licences, permissions, and authorizations needed for its Marketplace Content. Listing text, media, source and licence claims, publisher identity, donation information, seller information, and purchase terms must be accurate and must not omit a fact that would make them misleading.

A publisher must not manipulate a safety check or reviewer; hide relevant content or behavior during review; instruct an automated reviewer to approve, ignore, or conceal a finding; or change the live app after acceptance to evade the review that would apply to the changed representation.

8. Reports, investigation, and enforcement

Anyone may use Report this app on a public listing without an AirCode Ø account. Reports should identify the concern and must not include passwords, authentication secrets, or private app data. Legal notices may also be sent through https://aircodezero.com/contact and should include the public listing URL.

We may investigate suspected violations and may request information from a publisher. Depending on the nature, severity, evidence, recurrence, and legal requirements, we may reject an initial publication or update; require correction; remove curation; unlist or suspend a listing; refuse new Try, Install, Donate, or Buy actions; restrict the related managed-Relay public origin; preserve evidence; notify affected parties; or refer a matter to a competent authority. We may act immediately where reasonably necessary to protect visitors, third parties, the Marketplace, or Relay domain reputation.

Safety review and enforcement do not make us responsible for Marketplace Content and do not mean that we continuously monitor or certify app code. A publisher may use the appeal process made available in the owner interface. Restoration may be subject to correction, evidence of remediation, and a fresh technical availability check.

9. Changes to this Policy

We may update this Policy to address legal, security, product, or operational changes. Each version will identify its version and effective date. A new version does not govern a new publication or material update until the publisher is shown that version and expressly accepts it, except where mandatory law requires an earlier change. Previously published content remains subject to the enforcement rights and laws applicable to it.

10. Contact

Questions or legal notices about this Policy may be submitted through https://aircodezero.com/contact or sent to Spartacus lab SARL at the address above. Privacy questions and rights requests may be sent to privacy@aircodezero.com.