Terms of Service

By creating a BlitzCore ID (BCID) account, signing in, or using any BlitzCore application that authenticates through BCID, you agree to these Terms of Service. If you do not agree, you must not create an account or use BCID.

These terms constitute a binding agreement between you and BlitzCore. If you are using BCID on behalf of an organization, you represent that you have authority to bind that organization.

You are responsible for maintaining the security of your BCID account. This includes choosing a strong password, keeping your password confidential, and not sharing your session with unauthorized parties.

You must provide accurate information when registering, including a valid email address that you control. BCID requires email verification before granting a fully verified account.

You are responsible for all activity that occurs under your account. If you believe your account has been compromised, you must revoke all sessions and change your password immediately from the account portal.

You may create only one BCID account per individual. Creating multiple accounts to circumvent rate limits, bans, or other restrictions is prohibited.

You agree not to: attempt to access another user's account or data; use BCID to send spam, phishing, or malicious content; attempt to bypass authentication, authorization, rate limits, or security controls; reverse-engineer, decompile, or disassemble any part of BCID; use automated tools to scrape, crawl, or overload the service; or use BCID in violation of any applicable law.

BCID enforces rate limits per IP, per account, per email, per action, and per OAuth client. Repeated violations of rate limits may result in temporary or permanent suspension of access.

Public authentication endpoints are protected by Cloudflare Turnstile. Attempting to bypass bot verification is prohibited.

BCID supports two primary authentication methods: email and password, and Google sign-in via OAuth 2.0. Phone-number authentication is not supported.

When you sign in with Google, BCID receives and validates your Google ID token server-side. BCID uses your stable Google subject identifier as the external identity key; email alone is never used to identify a Google-linked account.

You may link a Google account to an existing BCID account or add a password to a Google-only account. You may unlink Google at any time, provided your account has at least one remaining authentication method.

BCID allows you to authorize third-party applications to access limited account information through OAuth 2.0 and OpenID Connect. When you authorize an application, you grant it the specific scopes shown on the consent screen.

You are responsible for reviewing the requested scopes before approving consent. Applications cannot access data outside the scopes you have granted.

You can revoke any connected application at any time from the Connected Apps section of your account portal. Revocation immediately invalidates the application's access tokens and refresh tokens.

Application developers register their applications through the BCID developer console at console.bcr.com.ng. Developers are responsible for the security of their client credentials and for complying with these Terms when integrating with BCID.

Your use of BCID is also governed by our Privacy Policy, which describes how we collect, use, and protect your information. The Privacy Policy is incorporated into these Terms by reference.

You can export a copy of your account data from the Privacy section of your account portal. The export includes your profile, sessions, connected applications, and recent security events in a machine-readable format.

You can deactivate or delete your account at any time. Account deletion enters a 14-day grace period during which you can cancel. After the grace period, your data is removed from the active database, subject to any legal retention obligations.

BCID is hosted on Cloudflare Workers and is designed for high availability. However, we do not guarantee uninterrupted service. Maintenance, updates, and infrastructure issues may cause temporary downtime.

We may modify, suspend, or discontinue any part of BCID at any time. We will make reasonable efforts to notify you of material changes, but we are not liable for any disruption to the service.

BCID, BlitzCore, and associated branding are the property of BlitzCore. The BCID logo, the BlitzCore hexagon-and-lightning-bolt mark, the visual design system, and all associated source code are protected by intellectual property laws.

You may not copy, modify, distribute, or create derivative works from the BCID branding or source code without explicit written permission.

The country and administrative division reference data used by BCID is sourced from the Blitz-core/country-admin-divisions dataset, which is distributed under the MIT and ODbL licenses with appropriate attribution.

You may terminate your BCID account at any time by requesting deletion from the Privacy section of your account portal.

We may suspend or terminate your account if you violate these Terms, if we believe your activity poses a security risk, or if required by law. We will make reasonable efforts to notify you before termination, except in cases of urgent security concerns.

Upon termination, your access to BCID and all BlitzCore applications that authenticate through BCID will be revoked. Your data will be handled according to the retention policy described in the Privacy Policy.

BCID is provided on an as-is and as-available basis. We do not warrant that the service will be error-free, secure, or available at all times.

You use BCID at your own risk. We are not liable for any loss of data, unauthorized access, or damage resulting from your use of the service.

No advice or information obtained from BCID creates any warranty not expressly stated in these Terms.

To the maximum extent permitted by law, BlitzCore shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of BCID.

Our total liability for any claim arising from these Terms or your use of BCID shall not exceed the amount you have paid us for the service in the twelve months preceding the claim, or zero if you have not paid for the service.

We may update these Terms of Service from time to time. When we do, we will update the Last updated date at the top of this page. If we make material changes, we will notify you by email or through the BCID account portal before the changes take effect.

Continued use of BCID after a terms change constitutes acceptance of the updated terms.

If you have questions about these Terms, you can contact us by email at no-reply@mail.bcr.com.ng. Transactional emails from BCID are sent from this address; for account-specific inquiries, sign in to your BCID account and use the support contact information provided there.