Effective 2026-05-22. By using any paid endpoint on api.seneschal.space or the control panel at panel.seneschal.space you agree to these terms.
No refunds. All Seneschal payments settle on-chain through Coinbase’s x402 facilitator. We cannot reverse a settled USDC transfer. There are no refunds for any reason, including but not limited to accidental cancellation, browser data loss, or buyer’s remorse. Top up only what you need.
1. Definitions
“Service” — the Seneschal API at api.seneschal.space, the control panel at panel.seneschal.space, and the public documentation at seneschal.space / docs.seneschal.space / stats.seneschal.space.
“Watch” — a Private Watch row created via POST /v1/private/watch, identified by a watchId and authenticated by a watchToken.
“Credit” — the prepaid balance in atomic USDC units associated with a Watch. Decays at the rates published in /v1/private/info.
“Webhook” — the signed HTTP POST we send to your URL when balance changes are detected.
“You” — the person or entity using the Service.
“We” / “us” — the operator of the Service, contactable via @OrknetP on Telegram.
2. What the Service does
Private Watch monitors a Monero or Zcash address you specify, using a read-only view key you supply, and POSTs you a signed event whenever incoming balance changes. Historical lookups return spendable + spent note totals on demand. The derive-viewkey endpoint converts a BIP-39 phrase into a read-only Unified Full Viewing Key for free. The premium endpoints expose paid liquidation feeds and per-builder bid statistics for searchers.
You can call the same endpoints from your own scripts. The control panel is a convenience UI; it has no privileged access.
3. No accounts, anonymous protocol
We do not maintain user accounts. Your sole credential is the watchToken we return at creation. If you lose it we cannot reset it; the Watch will keep running until cancelled, runs out of credit, or hits its maximum lifetime (90 days).
4. Eligibility & acceptable use
By using the Service you represent that:
You have legal capacity to enter into a contract in your jurisdiction.
You are not located in, ordinarily resident in, or organised under the laws of, any jurisdiction subject to comprehensive UK / EU / UN / US trade sanctions.
You will only submit a view key for an address that you control or have explicit consent to monitor. Using the Service to surveil third parties without consent breaches these Terms and may breach the privacy laws of your country.
You will not use the Service to facilitate money laundering, terrorist financing, sanctions evasion, fraud, or any other illegal activity.
You will not abuse the free derive-viewkey endpoint to brute-force seed phrases or otherwise rate-limit-evade.
You will not attempt to reverse-engineer rate limits, exhaust resources, or interfere with the operation of the Service.
We reserve the right to terminate any Watch or refuse service for breach of these acceptable-use terms, subject to §11 below.
5. Fees, billing & the credit meter
All prices are denominated in USDC on Base mainnet (CAIP-2 eip155:8453). Live prices are exposed at /v1/private/info and /.well-known/x402.
Payments use the x402 protocol: you sign an EIP-3009 transferWithAuthorization, Coinbase’s x402 facilitator settles it on-chain, we credit your Watch.
Watches drain credit at a per-day idle rate plus a per-webhook delivery rate. Both rates are published in /v1/private/info. The rates may change with at least 7 days’ notice on this page; we will not retro-bill credit you have already prepaid.
A one-shot low_credit webhook fires when your balance falls below the documented threshold so you have time to top up before the Watch pauses.
Top-ups are available in fixed tiers ($0.10 / $1 / $5) and in any variable amount from $0.10 to $25 via /v1/private/topup-custom (also exposed via the control panel slider).
No refunds, no chargebacks, no cancellations after settlement. Once an x402 payment has settled on-chain we have no protocol path back to your wallet. Credit balances on a cancelled Watch are forfeited. If you accidentally pay more than you intended you may use the Service against the surplus credit; there is no “cash out”. This non-refund clause is fundamental to the anonymous, account-free design and you accept it as a condition of use.
6. Service availability & force majeure
The Service is provided on a best-effort basis with no service-level commitments. Realistically expect >99% monthly availability based on operating history, but no SLA is given. Outages may occur for reasons including but not limited to:
Cryptocurrency network forks, reorganisations, or attacks.
Maintenance windows.
Force majeure events (acts of God, war, embargo, etc.).
We will not be liable for service interruptions caused by any of the above. Credit does not accrue refunds during outages but the per-day idle billing is paused on Watches that are not being actively polled.
7. Webhook delivery
Delivery is at-least-once. Your endpoint must be idempotent — verify the body, deduplicate on the included event id, and respond 2xx within a reasonable timeout.
Persistent failures (e.g. consecutive 5xx responses for an extended period) may cause us to back off or, after the documented retry budget is exhausted, pause delivery to that webhook. The Watch row remains and you can update the URL via the API.
Each webhook body is signed: X-Seneschal-Signature: sha256=<HMAC-SHA256(webhookSecret, raw-body)>. You are responsible for verifying that header before acting on the contents.
The endpoint URL must resolve to a public IPv4 / IPv6 address. Loopback, link-local, private RFC1918, RFC6598, and cloud-metadata addresses are rejected by SSRF guard.
8. View keys, addresses, seed phrases
View keys are read-only by design; they cannot sign transactions or spend funds. We treat them as sensitive nonetheless and encrypt them at rest (see Privacy §6).
The derive-viewkey endpoint accepts your seed phrase, derives the UFVK in memory, and discards. We recommend the offline orchard-scanner binary for any seed phrase you actually care about.
Historical scans stream your view key in memory only and never persist it.
9. Not financial / legal / tax advice
Nothing the Service produces or displays — notifications, historical totals, premium feeds, stats dashboards — constitutes financial, investment, accounting, legal, or tax advice. Treat all outputs as raw data and apply your own judgement.
10. Limitation of liability
To the maximum extent permitted by law:
The Service is provided “AS IS” and “AS AVAILABLE” without warranties of any kind, express or implied, including but not limited to merchantability, fitness for a particular purpose, accuracy, and non-infringement.
Our aggregate liability to you under or in connection with these Terms is capped at the total amount of USDC you have paid us in the twelve (12) months immediately preceding the event giving rise to the liability.
We are not liable for indirect, incidental, special, consequential, punitive, or exemplary damages, including lost profits, lost revenue, lost data, business interruption, or substitute-service costs, even if we have been advised of their possibility.
Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, in particular liability for death or personal injury caused by negligence and liability for fraud.
11. Suspension and termination
By you. You can cancel any Watch at any time via DELETE /v1/private/watch/<watchId> or the control panel. Forfeits remaining credit (§5).
By us. We may suspend or terminate a Watch immediately if you breach §4 (acceptable use), if continuing to deliver the Service would expose us to legal risk, or for any reason if we cease operating the Service. Where we terminate for a reason other than your breach and the Watch still has unused credit, the credit is still not refundable (§5) — this is documented and accepted at point of purchase.
Discontinuation of the Service. If we shut the Service down we will publish notice on this site and on GitHub at least 14 days in advance where reasonably practicable, but we are not obliged to refund unused credit. Open-source code remains available for self-hosting.
12. Privacy
See the Privacy policy for what we collect, why, retention windows, and your rights.
13. Intellectual property
The source code is published under the Apache-2.0 licence at github.com/Rotwang9000/seneschal-data-api. The brand name “Seneschal” and associated logos / artwork are reserved by the operator; use them only as a factual reference to this Service.
14. Changes to these Terms
We may revise these Terms. Material changes (in particular changes to pricing, refund policy, or acceptable-use scope) will be published on this page at least 7 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.
15. Governing law and dispute resolution
These Terms are governed by the laws of England and Wales. The courts of England have exclusive jurisdiction over any dispute or claim arising out of or in connection with these Terms or their subject matter. Nothing in this clause limits a consumer’s right to bring proceedings in the courts of their country of residence under any mandatory consumer-protection law.
16. Severability and entire agreement
If any provision of these Terms is found to be invalid or unenforceable, the remainder remains in full force. These Terms (together with the Privacy policy and the documented API reference at docs.seneschal.space) constitute the entire agreement between you and us with respect to the Service.