Terms of Service

• “Platform” means the Toshi CSS web application operated by the Company.
• “Wallet” means a third-party Solana wallet (e.g., Phantom, Solflare, Ledger) that you connect to the Platform.
• “Validator” means the Toshi CSS Solana validator (public key: toshB4tPQTFfyd3VFz2tC3nmEFHVmiBMUpcxwWiexn2) to which staking delegations are directed.
• “Staking” means the delegation of SOL tokens to the Validator via the Solana proof-of-stake mechanism.

You represent and warrant that you:

1. Are at least 18 years of age (or the age of majority in your jurisdiction);
2. Have the legal capacity to enter into these Terms;
3. Are not located in, nor a citizen or resident of, any jurisdiction where use of the Service would be prohibited by applicable law or regulation;
4. Are not on any sanctions list maintained by the United States (OFAC), European Union, United Nations, or any other applicable authority;
5. Will not use the Service for money laundering, terrorist financing, or any other illegal purpose.

GrandmaStake is a convenience service. We provide a user-friendly interface for creating and managing a Solana wallet and delegating SOL to a validator. We are not a bank, not a custodian, and not a fiduciary. Your funds are held on the Solana blockchain — not by us.

How managed wallets work. When you create a wallet through GrandmaStake, we generate a Solana private key inside a hardware-isolated environment (AWS Nitro Enclave). The key is immediately encrypted using a key derived from your passphrase via Argon2id and AES-256-GCM-SIV, then wrapped with a second layer of server-side envelope encryption. Only the doubly-encrypted blob is stored. Your passphrase is never stored and is never transmitted in a recoverable form.

• Private key is the ultimate certificate of ownership. On the Solana blockchain, whoever controls the private key controls the funds — unconditionally. GrandmaStake holds only an encrypted version of your key. Your 12-word recovery phrase is the definitive proof of ownership and will unlock your wallet in any Solana-compatible application (Phantom, Solflare, Ledger, etc.), independent of GrandmaStake, for as long as the Solana network exists.
• We cannot recover your key. If you lose your passphrase and do not have your 12-word recovery phrase backup, your funds are permanently inaccessible — to you, to us, and to anyone else. There is no password reset, customer support override, or backdoor that can recover them. This is a fundamental property of irreversible cryptography.
• We cannot reverse on-chain transactions. Once a transaction is broadcast and confirmed on the Solana network, it is final. We have no ability to cancel, reverse, or modify confirmed transactions.
• Service availability.Access to your wallet through GrandmaStake’s interface depends on our servers being operational. Your on-chain assets exist independently on the Solana blockchain and can always be accessed using your 12-word recovery phrase in any Solana-compatible wallet, regardless of GrandmaStake’s availability. This is why maintaining a secure, offline backup of your recovery phrase is essential.
• You are solely responsible for safeguarding your recovery phrase, passphrase, and account credentials.

In addition to the managed wallet service described in Section 3, users may connect their own Solana wallet (e.g., Phantom, Solflare, Ledger) to access BYOW (Bring Your Own Wallet) staking features.

1. To use BYOW staking features, you must connect a compatible Solana wallet.
2. You are solely responsible for the security and management of your connected wallet and its credentials.
3. We do not have access to the private keys, seed phrases, or wallet passwords of connected third-party wallets at any time.
4. Connecting your wallet does not transfer custody of your wallet to GrandmaStake in any way.

1. Delegation. When you stake SOL through the Platform, your tokens are delegated to the Validator via native Solana staking. Staked SOL remains on-chain under your wallet’s control at all times.
2. Rewards. Staking rewards are determined by the Solana network protocol based on validator performance, total network stake, and the inflation schedule. We do not guarantee any specific APY or return.
3. Unstaking. Unstaking requires a cooldown period of approximately 2–4 days (one Solana epoch). During this period, your SOL does not earn rewards and cannot be transferred.
4. Slashing. Staked SOL is subject to slashing risk if the Validator engages in malicious behavior or experiences extended downtime. While the Validator maintains strong performance, we cannot guarantee immunity from slashing events.
5. Merging. The Platform may offer the ability to merge stake accounts to optimize your position. This is a protocol-level operation and does not affect your principal or rewards.
6. Stake Account Authority Structure. Every Solana stake account carries two distinct on-chain authorities: a stake authority and a withdraw authority. For managed-wallet stake accounts, Toshi CSS holds the stake authority, which permits delegation, undelegation, redelegation, and merging — operational staking functions only. The withdraw authority, which is the sole credential capable of moving or liquidating the underlying SOL, is held exclusively by your wallet. Toshi CSS cannot withdraw, transfer, or liquidate your staked funds under any circumstances.Your withdraw authority is your unconditional, break-glass control over the staked SOL and is unaffected by GrandmaStake’s continued operation or any administrative action by Toshi CSS.

• Validator Commission: The Validator’s commission rate on staking rewards as set on-chain.
• Platform Fees: No fees are charged by Toshi CSS for staking, unstaking, or any other operation.
• Network Fees: Solana transaction fees (~0.000005 SOL per transaction) are paid from your wallet balance.

You agree not to:

1. Use the Service for any illegal, fraudulent, or unauthorized purpose;
2. Attempt to gain unauthorized access to any part of the Service or its infrastructure;
3. Interfere with or disrupt the integrity or performance of the Service;
4. Reverse-engineer, decompile, or disassemble the Service (except as permitted by applicable law);
5. Use bots, scrapers, or automated tools to access the Service;
6. Use the Service to launder money, finance terrorism, or evade sanctions.

The Service, including its design, code, branding, and documentation, is owned by Toshi CSS and protected by copyright, trademark, and other intellectual property laws. You are granted a limited, non-exclusive, non-transferable, revocable license to use the Service for its intended purpose. Nothing in these Terms grants you any right to our trademarks, logos, or branding.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL TOSHI CSS, ITS OFFICERS, DIRECTORS, EMPLOYEES, AFFILIATES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR DIGITAL ASSETS, WHETHER CAUSED BY TORT (INCLUDING NEGLIGENCE), BREACH OF CONTRACT, OR OTHERWISE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED ONE HUNDRED U.S. DOLLARS ($100).

You agree to indemnify, defend, and hold harmless Toshi CSS and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys’ fees) arising out of or in any way connected with: (a) your access to or use of the Service; (b) your violation of these Terms; (c) your violation of any applicable law or regulation; or (d) your negligence or willful misconduct.

1. These Terms shall be governed by and construed in accordance with the laws of [JURISDICTION], without regard to its conflict-of-law provisions.
2. Any dispute arising out of or relating to these Terms shall first be attempted to be resolved through good-faith negotiation for a period of thirty (30) days.
3. If negotiation fails, disputes shall be resolved through binding arbitration under the rules of [ARBITRATION_BODY], conducted in [CITY, STATE/COUNTRY].
4. You agree to waive any right to a jury trial and to participate in a class action lawsuit or class-wide arbitration.

We may modify these Terms at any time by posting the revised version on the Platform. Your continued use of the Service after the revised Terms are posted constitutes acceptance of the modified Terms.

We may suspend or terminate access to the Service at any time, with or without cause, upon notice. Termination means restricting access to the GrandmaStake web application and API. Your on-chain SOL and staked assets remain on the Solana blockchain and are not affected by termination of your GrandmaStake account. If you have a GrandmaStake-managed wallet, you can access your funds at any time using your 12-word recovery phrase in any Solana-compatible application. This is why maintaining a secure, offline backup of your recovery phrase is essential — it guarantees access to your funds independent of GrandmaStake’s continued operation.

If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable.

For questions about these Terms, contact us at:

• Email: info@toshicss.com
• Support: info@toshicss.com