New! Lance, Parquet & Iceberg format adapters — schema-aware PII filtering and envelope encryption for ML & analytics tables.Read the docs
Maskura
PricingGitHubDashboardLog in
SetupPricing

Terms of Service

Effective: September 4, 2026

1. Acceptance of Terms

These Terms of Service ("Terms") govern your access to and use of Maskura (formerly S4), referred to as "the Service", an S3-compatible processing gateway operated by 231self ("we", "us", "our") and made available at maskura.dev and api.maskura.dev. By creating an account or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.

Use of cookies, local storage, and advertising pixels is described in ourPrivacy Policy. Essential cookies are always active; analytics and advertising pixels load only with your consent.

2. The Service

The generally available hosted Service proxies requests to your own S3-compatible storage through a pluggable WASM processing pipeline, including built-in encryption and redaction filters. Uploading customer components to the hosted Service is rollout-gated and is available only when the dashboard's Hosted rollout status says custom component uploads are enabled for your workspace. Custom component loading remains available in the self-hosted OSS gateway. Hosted bring-your-own storage accepts the allowlisted AWS S3 and Backblaze B2 HTTPS endpoint families. MinIO and arbitrary custom endpoints are available only with the self-hosted OSS gateway. You are responsible for your own storage backend and its costs.

In bring-your-own-storage mode, Maskura does not provide durable object storage. Most object data is streamed through the Service. A transformed read that cannot be streamed safely may use a temporary encrypted local spool within a 256 MiB process quota; stale spool artifacts are removed within a bounded cleanup window. Hosted transformed reads are limited to 64 MiB. Text records and complete JSON documents are limited to 8 MiB.

Managed storage is an optional storage mode for a workspace. It includes up to 1 GiB of visible capacity per workspace and does not promise replication or multi-provider durability. Standard single PUTs and durable client-driven multipart uploads are supported; presigned destination PUTs are not. Deleting a managed object removes it from visibility immediately, with physical cleanup scheduled to complete within 24 hours.

3. Accounts

You must provide accurate information when creating an account. You are responsible for safeguarding your credentials and API keys, and for all activity under your account. You must notify us immediately of any unauthorized use.

4. Acceptable Use

You agree not to use the Service to:

  • Violate any applicable law or regulation;
  • Infringe the intellectual property or privacy rights of others;
  • Transmit malware, or attempt to breach or disrupt the Service;
  • Circumvent billing, quotas, or rate limits.

5. Fees & Billing

The Service is billed on a pure pay-as-you-go basis: there are no subscriptions and no base fees. Each calendar month you receive a free allowance (10,000 successful writes, 100,000 successful reads, and 1 GB processed). Successful PUT and DELETE operations count as writes; successful GET, HEAD, and LIST operations count as reads. Usage above the free allowance is charged at the rates shown on our Pricing page ($30 per 1M successful writes, $2 per 1M successful reads, and $0.15 per GB processed) and is drawn down from your prepaid credit balance. For successful PUT and GET operations, processed bytes are max(source bytes, stored/emitted output bytes). Metadata operations, LIST, HEAD, and DELETE have zero processed bytes. Failed operations are not billed. You add credit in amounts of $10 or more; credit never expires. Prepaid credit purchases are generally non-refundable except where applicable law requires otherwise. Payments are processed by Paddle, our merchant of record. All amounts are in USD unless otherwise stated. Refund and charge-review requests are handled as described in our Refund Policy; nothing in these Terms limits non-waivable legal or chargeback rights.

6. Open Source & Self-Hosting

Maskura’s data plane is open source under the Apache 2.0 license. You may self-host it under that license. These Terms apply only to the hosted Service, not to your own self-hosted deployment.

7. Intellectual Property

The Service, its branding, and its software are owned by us or our licensors. You retain all rights to your data and the content you process. By using the Service, you grant us a limited license to process your data solely to provide the Service.

8. Disclaimer of Warranties

The Service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted or error-free.

9. Limitation of Liability

To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, data, or goodwill, arising out of or related to your use of the Service. Our total liability shall not exceed the amount you paid us in the twelve months preceding the claim.

10. Termination

You may stop using the Service at any time. We may suspend or terminate your access for violation of these Terms, suspected fraud, or extended inactivity, with or without notice. Upon termination, your right to use the Service ceases immediately.

11. Changes to These Terms

We may update these Terms from time to time. Material changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the revised Terms.

12. Contact

Questions about these Terms? Contact us athello@231self.com.

© 2026 Maskura · 231self. Built for developers.Site v0.3.41

Amazon Web Services, AWS, and Amazon S3 are trademarks of Amazon.com, Inc. or its affiliates. Maskura is not affiliated with or endorsed by Amazon Web Services.

GitHubOpen sourcePricingTermsPrivacyRefundCookie settingsContact

Cookies and privacy

We use cookies and similar technologies on this site. Strictly necessary cookies are required for the site to function and are always on. Analytics and marketing pixels — such as PostHog, Reddit, and LinkedIn — are set only with your consent. You can accept all, accept essential only, or reject all, and change your choice at any time. See our Cookie Policy and Privacy Policy.