Terms of Service

These terms bind you when you use ccprime.

They govern ccprime.xyz and everything served from it — the wallet interface, the trading interface, the public market endpoints and the authenticated API — operated by Blueprint Infrastructure, LLC ("Blueprint", "we", "us"). By creating an account, generating a wallet, calling the API, or otherwise using the service, you agree to them.

If you use ccprime on behalf of an organisation, you represent that you are authorised to bind it, and "you" means that organisation.

The Privacy Policy, the Risk Disclosure and the Cookies & Local Storage notice are incorporated into these terms by reference.

Software that relays what your browser signs.

ccprime has two halves. The first runs in your browser: it generates an Ed25519 key, wraps its 32-byte seed under a key derived from your passkey, stores the resulting ciphertext in your browser's own storage, and signs with it. The second is a hosted service that prepares what is to be signed, relays signed payloads, reads public chain data, and keeps your account, plan and usage records.

What we do not do

• We do not take custody of, hold, pool, or control your assets, and we hold no balance on your behalf. Assets sit at a Canton party derived from your public key.
• We do not act as your agent, adviser, fiduciary, or counterparty to a trade. Trades settle between users on the ledger.
• We do not provide investment, legal, accounting or tax advice. Quotes, marks, charts and market data are information, not a recommendation to transact.
• We do not operate the liquidity venues we route to, nor any deposit route other than a native Canton transfer to your own party (see § 07).

Regulatory status

Blueprint's regulatory status, and the licences or registrations (if any) it holds, are stated here and nowhere else: [[OPERATOR: licensing / registration disclosure, or an explicit statement that none is held]]. Nothing elsewhere in the service should be read as a claim of authorisation by any regulator.

Who may use the service.

To use ccprime you must:

• be able to form a binding contract, and be at least [[OPERATOR: minimum age]] years old;
• not be a person or entity subject to sanctions administered by [[OPERATOR: applicable sanctions authorities]], nor owned or controlled by such a person or entity;
• not be located in, or accessing the service from, [[OPERATOR: restricted jurisdictions]]; and
• use the service only where doing so is lawful for you.

The passkey is the gate; the phrase is the root.

• Accounts are secured with passkeys and optional two-factor authentication. There is no password. Signing in with Google, GitHub or Microsoft may create the account, but the wallet always requires a passkey, because the passkey is what gates signing.
• Every signature requires a live user-verification gesture. Where your authenticator cannot perform the WebAuthn PRF extension, the seed is wrapped under a passphrase you choose instead, and that passphrase is requested for every signature.
• You are shown a 24-word recovery phrase once, and can re-display it behind your passkey. It is the root of the wallet. Whoever holds it holds the funds; whoever loses it, with no other recovery path, loses the funds. We cannot reissue it and no support path can restore it.
• API keys are personal to the account that issued them. You are responsible for all activity carried out with your account, your keys, and your signatures. Keys can be rotated and revoked from your account page.
• Tell us promptly if you believe an account or key has been compromised so it can be revoked. Report suspected security issues privately to security@theblueprint.xyz.

Published in full, and charged only on settlement.

The complete schedule is published on the fee section of the home page; per-plan trading rates and subscription prices are returned live by GET /api/plans and shown at /#pricing. Those published values govern, and they are what this section incorporates by reference. At the date above the schedule is: a taker fee charged in basis points that varies by plan, a maker fee of zero on every tier, and nothing at all for deposits, sends, withdrawals or custody.

A trading fee is structured as a leg of the same Canton transaction that settles the trade, never as a separate transfer and never as an invoice. If the transaction does not settle, no fee exists. There is no maintenance fee, inactivity fee, custody fee, or undisclosed spread taken against the mark.

Two costs are not ours and are not covered by the schedule. The liquidity a route crosses charges its own pool fee — returned on every quote as feePct, and already priced into the output amount the quote states. Transactions also consume Canton synchronizer traffic.

Paid plans are billed by subscription through Stripe at the prices shown at checkout. Fees are exclusive of taxes, which are your responsibility where applicable. You may cancel at any time and access continues to the end of the paid period. Except where required by law, payments are non-refundable, including for partial periods.

A trade is one transaction, or it is nothing.

• A quote is not an offer. Quotes are live readings of pool state at the moment you ask. Prices move, routes change, and a quote does not bind either of us until a transaction settles.
• Orders lock funds under your signature. A resting order is a token-standard allocation you sign, with an expiry equal to the order's time in force. The lock is held by the ledger. Nothing is transferred to Blueprint.
• Settlement is atomic. Both asset legs and the fee leg land in one Canton transaction or the transaction is rejected whole. A half-settled trade is not a state the ledger can represent.
• Ambiguous outcomes are never guessed. Where a submission reaches the ledger and its result cannot be established, it is recorded for reconciliation and resolved by an operator. It is not retried and it is not assumed to have failed.

Where a figure cannot be read from the chain or a market, the interface shows an em-dash rather than an estimate. An empty field means "not known", never "zero".

We operate none of the ways in, except the native one.

Assets reach your Canton party by one of four routes. Blueprint operates none of them except a native Canton transfer, and never takes possession of an asset in transit on any of them.

The USDC route is the only one that executes on this site: an ERC-20 approval and one depositToRemote call addressed to your Canton party, built from Circle's published mainnet addresses and signed by your own Ethereum wallet. Blueprint makes no Ethereum network call, never sees your Ethereum key, never holds the USDC and cannot move it — your wallet software signs and broadcasts. The contracts involved, written in full:

xReserve, Ethereum

0x8888888199b2Df864bf678259607d6D5EBb4e3Ce

USDC, Ethereum

0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48

Canton remote domain

10001

Using a third-party route means accepting that third party's terms and that third party's risk. Blueprint is not a party to your relationship with Circle, onRails, BitSafe, your Ethereum wallet software, or any exchange you send from.

Every surface in the product is a call you can make yourself.

• Market data is public and needs no account. Execution requires an account and a key, because execution is the part that moves someone's money.
• Authenticate with Authorization: Bearer <key> or X-API-Key: <key>. Anonymous access is served at a baseline per-IP rate limit; higher limits and included volumes require a key on the applicable plan. Your current budget is returned on every response in the RateLimit-* headers.
• We may throttle, suspend or revoke access that circumvents rate limits or quotas, degrades the service for others, or is used to attack it.
• Automated and agent-driven access is welcome within your limits. You are responsible for everything sent with your key, including by software acting on your behalf.
• A key can price and place. A key cannot sign for your funds — that always requires the wallet, on a device holding your seed.
• Endpoints may change. Breaking changes to a documented endpoint will be announced [[OPERATOR: API deprecation notice period]] in advance.

What you must not do here.

• Use the service for, or to facilitate, anything unlawful — including money laundering, terrorist financing, sanctions evasion, fraud, or the proceeds of crime.
• Manipulate a market: wash trading, spoofing, layering, or entering orders designed to create a misleading impression of price, volume or liquidity.
• Disrupt or degrade the service, probe or breach its security, evade its rate limits or quotas, or attempt to gain access to an account or key that is not yours.
• Resell or redistribute raw API access without a written agreement.
• Misrepresent your relationship with Blueprint, or present ccprime's output as your own venue, price or record.
• Attempt to induce Blueprint to hold, control, or sign for your assets. The service is built so it cannot; asking it to is a breach of these terms.
• Introduce third-party code into the ccprime origin, or induce another user to do so. Script execution on this origin is total compromise of every wallet on it.

Provided as is, and as available.

The service and all data in it are provided "as is" and "as available", without warranty of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement.

Much of what ccprime shows you originates outside our control: Canton MainNet itself, the liquidity pools quotes are read from, the token registries that publish instruments, the public explorer API chain reads go through, and the issuers behind bridged assets. We work to represent them accurately and to show nothing where we cannot — but we do not guarantee completeness, accuracy, timeliness, or availability, and we do not guarantee uninterrupted service.

What we are, and are not, answerable for.

To the maximum extent permitted by law, Blueprint is not liable for any indirect, incidental, consequential, special, exemplary or punitive damages, or for any loss of profits, revenue, data, goodwill, business, or digital assets, arising out of or relating to the service — whether in contract, tort, or otherwise, and whether or not we were advised such loss was possible.

In particular, and without limiting the above, Blueprint is not liable for loss arising from:

• your loss of a recovery phrase, passkey, recovery passphrase, or device, or the clearing of your browser's storage — no path exists by which we could restore any of them;
• a transaction you signed, including one sent to an address you entered incorrectly;
• the acts, omissions, insolvency or failure of a third party — an asset issuer, a bridge operator, a liquidity venue, a wallet extension, a counterparty, or a network;
• the price or availability of any digital asset; or
• a fault, congestion, reorganisation, fork or halt in Canton MainNet, Ethereum, Bitcoin, or any other network.

Our total aggregate liability for all claims relating to the service is limited to the total fees you paid Blueprint for the service in the twelve months before the event giving rise to the claim.

Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for fraud or fraudulent misrepresentation. Some jurisdictions do not allow certain exclusions, in which case the exclusion applies to the fullest extent those laws permit.

Claims that arise from your use.

You will indemnify and hold harmless Blueprint Infrastructure, LLC and its officers, employees and agents against any claim, demand, loss, liability, or expense (including reasonable legal fees) arising out of your use of the service, your breach of these terms, your violation of any law, or your infringement of any third party's rights.

Leaving, and being asked to leave.

You may delete your account at any time from your account page. Deleting it removes your account record and, by cascade, your sessions, passkey credentials, API keys, recovery codes, linked sign-in identities, wallet party record, orders and the stored vault ciphertext.

We may suspend or terminate access for breach of these terms, to comply with law, or to protect the service and its users. On termination your right to use the service ends. Sections 10, 11, 12 and 14, and any payment obligation already accrued, survive.

Where this is decided.

These terms are governed by [[OPERATOR: governing law — state / country]], without regard to its conflict-of-laws rules.

Disputes will be resolved by [[OPERATOR: dispute resolution — courts of a named venue, or an arbitration provider, seat and rules]], and [[OPERATOR: class-action waiver — include or omit]].

If any provision of these terms is held unenforceable, the rest remains in effect. Our failure to enforce a provision is not a waiver of it. You may not assign these terms without our consent; we may assign them to a successor to our business. These terms, together with the documents incorporated in § 01, are the entire agreement between us regarding the service.

How this document moves.

We may update these terms. The "last updated" date at the top of this page always reflects the current version, and material changes will be reflected there. Continued use of the service after a change constitutes acceptance of it. If you do not accept a change, stop using the service and delete your account — your wallet is unaffected either way.

Who to write to.

Entity

Blueprint Infrastructure, LLC

Registered address

[[OPERATOR: registered business address]]

Legal & terms

[[OPERATOR: legal contact email]]

Security reports

security@theblueprint.xyz — please report privately first

Company

theblueprint.xyz