Terms of Service

Effective Date: August 5, 2026

These Terms of Service ("Terms") govern your use of the website cupass.com (the "Service"), operated by CardWise ("we", "our", or "us"). By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, please do not use the Service.

Key point: All tools on CardWise run entirely in your browser. Your data is never uploaded, stored, or processed on our servers.

1. Acceptance of Terms

By accessing the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. We reserve the right to modify these Terms at any time. Continued use after changes constitutes acceptance.

2. Description of Service

CardWise provides free, browser-based developer tools for security engineers, including but not limited to:

Smart card and NFC tools (APDU builder, ATR decoder, NDEF parser, EMV TLV parser)
Cryptography tools (AES/SM4 encryption, RSA, SM2, hash digest, HMAC generator, JWT decoder)
Encoding and data tools (Base64 encoder, URL encoder, CRC calculator, ASN.1 parser)
Knowledge base articles and technical tutorials

All computations are performed client-side using JavaScript. No data is sent to our servers.

3. Use of Tools — Disclaimer

The tools provided on this Service are for educational, development, and testing purposes only.

Not for production use: Do not rely on these tools as the sole method for security-critical operations such as key generation, encryption, or authentication in production systems.
Not a substitute for professional advice: The results generated by our tools should be independently verified. We make no guarantees about the accuracy, completeness, or fitness for any particular purpose of tool outputs.
Cryptographic tools: While we use well-established algorithms (Web Crypto API, proven libraries), browser-based cryptography has inherent limitations (memory management, side-channel exposure). Use dedicated hardware security modules (HSMs) for production cryptographic operations.
Smart card operations: APDU commands, key diversification, and session key calculations generated by our tools must be validated against your specific card platform and security policy before use with real cards.

4. Data Privacy

Your data stays on your device.

All tool computations happen entirely in your web browser using JavaScript.
Input data, keys, certificates, APDU commands, and other sensitive information are never transmitted to our servers.
We do not store, log, or have access to any data you enter into the tools.
No user accounts or registration is required — there is no database of user information.

For details on analytics, CDN, and advertising data collection by third parties, see our Privacy Policy.

5. Intellectual Property

Website content: The design, layout, text, graphics, and code of this website are the property of CardWise and are protected by copyright and other intellectual property laws.
Tool outputs: Results generated by the tools (e.g., computed hashes, encoded data, parsed structures) are not owned by us — they are mathematical outputs derived from your input.
Standards and specifications: References to ISO, EMVCo, GlobalPlatform, NIST, and other standards are for informational purposes. The standards themselves are the property of their respective organizations.
User content: You retain full ownership of any data you input into the tools.

6. Prohibited Uses

You agree not to:

Use the Service for any unlawful purpose or to facilitate illegal activities
Attempt to reverse engineer, decompile, or extract the source code of the Service beyond what is normally exposed through browser developer tools
Use automated scripts (bots, scrapers) to access the Service in a manner that imposes excessive load on our infrastructure
Use the Service to generate or test malicious APDU commands, exploit payloads, or attack vectors against systems you do not own or have authorization to test
Misrepresent the origin of content generated by the tools

7. Limitation of Liability

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

To the maximum extent permitted by applicable law:

We shall not be liable for any direct, indirect, incidental, special, consequential, or punitive damages arising from your use of the Service.
We shall not be liable for any errors, inaccuracies, or failures in tool outputs.
We shall not be liable for any loss of data, financial loss, or damage to equipment resulting from use of the tools.
We do not guarantee uninterrupted or error-free operation of the Service.

8. Third-Party Links

The Service may contain links to third-party websites (standards bodies, product retailers, documentation). We do not endorse, control, or assume responsibility for any third-party content, privacy practices, or products available through these links.

9. Indemnification

You agree to indemnify and hold harmless CardWise and its operators from any claims, damages, losses, or expenses (including reasonable attorneys' fees) arising from your use of the Service or violation of these Terms.

10. Termination

We reserve the right to restrict or terminate access to the Service at any time, without notice, for any reason, including violation of these Terms.

11. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the People's Republic of China, without regard to conflict of law principles. Any disputes shall be resolved in the courts of Beijing, China.

12. Contact

For questions about these Terms of Service, please contact us at:

Email: [email protected]

See also: Privacy Policy | About Us | Disclaimer | Contact