Consent & approvals

Permission in writing.
Approval on the file.

Nothing on NIL.CARDS runs on implied consent. Visibility to brands requires a signed, versioned, revocable document — and publication requires a recorded decision on the exact finished file, pinned to its fingerprint. This page is the whole system, in order.

Likeness & Media Consent

Season 2026

Part A

Marketing release — the card may be visible to brands.

Part B — AI election
  • Must-Approve every asset
  • Fast-Track within my limits
  • Decline AI entirely

A. Parent

E-signed · guardian of record

consent-v0.1sha256 8f3a91c2…expires: season end
The document

One consent, two separate permissions

Signing one part never implies the other. A family can put a card in front of brands and still say no to AI entirely — and plenty will. Both are normal.

Part A

The marketing release

Permission for the member's card to be visible to brands and bookable for campaigns. Without an active Part A, the card simply never appears in the catalog — visibility is derived from the signed record, not toggled by hand.

  • E-signed by the adult member — or the parent, for a minor
  • Versioned: you sign a specific document, hashed at signing
  • Expires each season; re-consent is a fresh signature, never an auto-renew
Part B

The AI election

A separate, explicit choice about AI-generated content — never bundled into the release. Three options, one tap to change your mind later:

  • Must-Approve — every finished AI asset comes to you before it exists in public
  • Fast-Track — pre-authorize within hard limits you set — with a 24-hour veto on every asset
  • Decline — no AI content, period; UGC and social services remain available

Voice is never eligible for synthesis, under any election. Video Fast-Track requires its own separate opt-in.

Approval modes

Three speeds. One rule: the family outranks everyone.

Every mode reviews the finished asset, not a description of one. The differences are who looks, and when.

Must-Approve

The default
Who reviews
Member — and parent, for minors
What they see
The finished, watermarked, labeled asset
Before publish
Explicit approval, every single asset
Veto window
Not needed — nothing moves without a yes
Available to
Everyone

Fast-Track

Parent-signed, Beta
Who reviews
Automated screen + platform human reviewer
What they see
Every asset, against your signed boundaries
Before publish
24-hour parent veto window on each asset
Veto window
24 hours — one tap, no reason needed
Available to
Minors, only with parent pre-authorization

Instant auto

18+ only
Who reviews
Automated screen
What they see
Published asset, with takedown always available
Before publish
Nothing — that's the point, and the trade
Veto window
None — takedown after the fact instead
Available to
Adults only. For minors it's a database impossibility

The one-tap revert: a parent can switch Fast-Track back to Must-Approve at any moment, effective on everything unpublished. Boundaries only ever tighten instantly; loosening them takes a fresh signature.

What a decision records

An approval is evidence, not a button press

The click is the easy part. What the platform writes down when you click is what makes the whole system defensible.

Decisions pin to the file

Every approve, reject and veto is recorded against the asset's SHA-256 fingerprint — you approved this exact file, provably, not 'something like it.'

Edits void approvals

Change a single pixel after approval and the hash no longer matches: the approval is void and the asset re-enters review. Nobody 'touches it up' after your yes.

No-action releases are logged too

In Fast-Track, an asset that publishes because the veto window passed is recorded exactly that way — a release by expiry, never disguised as an approval.

Every actor, every timestamp

Member, guardian, platform reviewer, brand — each decision carries who, when, and in what role. The approval trail reads like a signature page, because it is one.

Changing your mind

Yes is revocable. No is instant.

Consent that can't be withdrawn isn't consent. The exits are as engineered as the entrances.

Revoke any permission, any time

Revocation takes effect immediately: the card leaves the catalog, unpublished work stops, and nothing new is generated. Money already earned is unaffected — changing your mind is never penalized.

Consents expire on purpose

Every consent carries a season expiry. When it lapses, brand visibility ends on its own — silence defaults to no. Re-consent is a fresh, versioned signature.

Your records, downloadable

The signed document, its version, its hash, the election, and every decision made under it — available to the family as a complete record, retained for seven years.

Signed. Versioned. Revocable.

The paperwork is the product working as intended.

Every yes on NIL.CARDS is specific, recorded and reversible. That's not friction — that's the reason everything else here gets to exist.