Draft
This page has not been reviewed by a lawyer, and parts of it are not written yet: the refund policy, and who the seller of a spot is. It describes how buying works today and will be completed.
Terms and privacy
What the archive is
The Maulik Mind Archive (“the archive”) is a personal creative experiment by Maulik. It is hosted on Mailient's website, mailient.xyz, and it is not a Mailient product, feature or service.
The first edition has 25 numbered spots, 001 to 025, in three parts of the map: Front of mind (001–005, $129), Middle of mind (006–015, $99), Back of mind (016–025, $49).
What a spot is, and is not
A confirmed spot is a public entry in the archive: a number, a display name and a title, shown on the archive page, with a downloadable certificate that shows the same details and the date of confirmation.
Your spot is symbolic. It does not provide access to Maulik, private communication, consulting, influence, or ownership of anything.
Claims and payment
A spot is paid for through Polar's checkout, at the price of the part of the map it sits in. After paying, a sign-in link goes to the email address the payment was made with. Opening it lets you set up your spot: your product's website and logo, and your entry's name and title. Only someone who can read that inbox can change the spot.
Clicking Pay holds the spot for you for 20 minutes, so nobody else can start paying for it. If you don't finish, the hold ends and the spot opens again. Selecting a spot or filling in the form holds nothing.
Once Polar confirms your payment, the spot is yours for good: it cannot be held or sold again, whether or not your name and title have been published yet. They appear once they have been read and confirmed.
In rare cases two people can still pay for one spot, for example when a checkout finishes long after its hold ended. The payment Polar confirms first gets the spot, and the other buyer is asked to choose another.
Still to be written: the refund policy, who the seller of a spot is, and what happens to a payment if an entry is turned down.
Display names and titles
Display names can be up to 32 characters and titles up to 32. Both are public once a spot is confirmed, so a nickname is fine and private information does not belong in either.
They are limited to Latin letters, numbers, spaces and basic punctuation, and cannot contain links, email addresses, phone numbers or other contact details. Names that present an entry as speaking for the archive or for Mailient are not accepted.
A spot can also show a product: a name of up to 40 characters and a public website address, which must be https. The archive looks at that website to find its logo and shows it to you before you save. The logo sits in your seat on the map and links to your website; the link opens in a new tab and is marked as sponsored, because it was paid for.
Every entry, product and later change is read before it appears. Maulik can turn down a name, title, product, logo or website that is offensive, hateful, harassing, misleading, impersonates someone, links to anything harmful, or is otherwise inappropriate, and can take any of it down later for the same reasons.
Privacy
The notify list. Once the first edition is full, the page offers to tell you about a second one. If you ask, the archive stores your email address and uses it only for that. It is not added to any Mailient mailing list, and it is not sold.
Abuse protection. To stop automated submissions, both forms count requests from each IP address in Mailient's rate limiter.
The claim form on the archive page. The spot, display name and title you choose there are not sent anywhere until you pay. When you go to pay, they are kept in that browser tab; the page you reach after checkout sends them along with its request for your sign-in link, so your setup page opens with them filled in. They are cleared from the tab once sent, after a few hours, or when the tab closes.
Holds and payments. When you click Pay, your browser tab keeps a random identifier so your own hold can be recognised; it is not linked to your name or email. When Polar reports a payment, the archive keeps the order reference, the email address the payment was made with, the amount and the spot, to lock the spot to that payment and match your entry to it.
Signing in to your spot. Sign-in links only go to an email address a payment came from. The archive stores a scrambled form (a hash) of each link, not the link itself, and a link works once, within 30 minutes. Opening it sets a cookie in that browser that keeps you signed in to your spot for 30 days. It is not a Mailient account, and signing out removes it.
Setting up your spot. What you save there (display name, title, product name, website and the logo found on it) is kept with your email address as a request, so it can be matched to your payment and read before it appears. The email address is used for that and to reach you about your spot, and is never shown.
Your website and its logo.When you ask the archive to find your logo, its server fetches your website's page and the icons it lists, from public https addresses only, and never runs anything on them. It keeps the address, the name the site gives itself, and a re-encoded copy of the logo it chose, so the same site isn't fetched again for a day and a saved logo can be checked against what was found.
Confirmed entries. A confirmed entry's spot number, display name, title and confirmation date are public on the archive page and on its certificate.
Where it is kept. Everything above is stored in the database behind mailient.xyz. The page itself uses the same site analytics as the rest of mailient.xyz, described in Mailient's privacy policy.
Deleting it. To have your email address removed from the notify list, an entry request withdrawn, or a confirmed entry taken down, email mailient.xyz@gmail.com.
Changes and contact
This draft will change, and the date at the top will change with it. Questions go to mailient.xyz@gmail.com.