# Third-party notices

## Liquid glass logo reveal

`components/ui/liquid-glass-logo-reveal.ts` adapts the shader and spring timeline from the component provided by the user, based on [zanwei/glass-icon-reveal](https://github.com/zanwei/glass-icon-reveal). This attribution covers the referenced software, not ownership or trademark clearance of the Candelr-branded SVG. [Original license](https://github.com/zanwei/glass-icon-reveal/blob/main/LICENSE). An unchanged copy is distributed at `/legal/licenses/glass-icon-reveal-LICENSE.txt`.

MIT License

Copyright (c) 2026 Zanwei Guo

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

### TinySDF distance transform

The same reveal component identifies its signed-distance-field implementation as the TinySDF method. Its `edt` and `edt1d` implementation follows the Mapbox TinySDF implementation of the Euclidean distance transform. The upstream BSD-2-Clause notice, including Mapbox's copyright and disclaimer, is preserved in full at `/legal/licenses/tiny-sdf-LICENSE.txt`. Source: [TinySDF license](https://github.com/mapbox/tiny-sdf/blob/main/LICENSE.txt), verified 29 October 2026. The attribution to Zanwei above does not replace this upstream notice.

## Self-hosted fonts

The exported site serves the font files locally. The runtime does not need to request these fonts from Google Fonts. `app/document.tsx` declares the fonts through `next/font/google`; build-time retrieval is separate from browser use.

| Font | Copyright holder in the font metadata | License | Full notice |
| --- | --- | --- | --- |
| Space Grotesk | Copyright 2020 The Space Grotesk Project Authors | SIL Open Font License 1.1 | `/legal/licenses/space-grotesk-OFL.txt` |
| Geist | Copyright 2024 The Geist Project Authors | SIL Open Font License 1.1 | `/legal/licenses/geist-OFL.txt` |
| Geist Mono | Copyright 2024 The Geist Project Authors | SIL Open Font License 1.1 | `/legal/licenses/geist-mono-OFL.txt` |

The full notices were obtained from the official Google Fonts repository on 29 October 2026 and are included unchanged, with their copyright statements. The font license does not license Candelr's application, brand or written content. Source URLs and SHA-256 values are recorded in `/legal/licenses/index.json`.

## Browser software and generated CSS

These notices cover the reviewed application's browser runtime, generated CSS and attributed reveal code. They are not a claim that every installed development dependency is shipped to visitors. Retain the licenses accompanying dependencies if redistributing a development environment or server bundle.

| Component | Installed version reviewed | License | Full notice |
| --- | --- | --- | --- |
| React | 19.2.6 | MIT | `/legal/licenses/react-LICENSE.txt` |
| React DOM | 19.2.6 | MIT | `/legal/licenses/react-dom-LICENSE.txt` |
| React Server DOM Webpack | 19.2.6 | MIT | `/legal/licenses/react-server-dom-webpack-LICENSE.txt` |
| React Scheduler | 0.27.0 | MIT | `/legal/licenses/scheduler-LICENSE.txt` |
| Vinext | 1.0.0-beta.5 | MIT | `/legal/licenses/vinext-LICENSE.txt` |
| Vite React RSC plugin | 0.5.26 | MIT | `/legal/licenses/vite-plugin-react-LICENSE.txt` |
| Lucide React | 1.31.0 | ISC; includes upstream Feather MIT notice | `/legal/licenses/lucide-react-LICENSE.txt` |
| Tailwind CSS | 4.2.1 | MIT | `/legal/licenses/tailwindcss-LICENSE.txt` |

Package notices are byte-for-byte copies of the installed packages. The Vite plugin notice was retrieved from its official repository because the installed package declares MIT but omits a separate license file. Lucide's complete notice is retained, including the Feather-derived icons and Cole Bemis attribution. `clsx`, `tailwind-merge` and `class-variance-authority` have no imports in the current application or component source, so their presence in the package manifest is not treated as evidence of browser distribution. Re-audit notices when imports or dependencies change.

## Candelr-authored visual assets

The two-candle `Mark`, favicon and wordmark are project-authored brand assets. The original brand export script, `work/build-candelr-brand.py` in the parent workspace, constructs the candle geometry from the Candelr `Mark` component and outlines the letters of “candelr.” from Space Grotesk at weight 600. The brand-kit export manifest records the font hash and glyph positions. `work/adapt-footer-glass.py` copies that generated horizontal SVG into `public/media/candelr-wordmark.svg`. The font's OFL notice is preserved above. This provenance record is separate from trademark registration or name-clearance work; neither is claimed here.

Stealth, Apex, Quantum and Titan use the Candelr project's original vector frames. Holo retains the locally authored translucent glass surface and vector treatment. The unverified liquid-border implementation is not included. The spatial environment uses the original images generated for Candelr and serves them locally. Galaxy animates the image with CSS; the additional immersive-only Orbital horizon option combines it with new project-authored Canvas 2D and CSS artwork. It contains no supplied scene code or remote embeds. It is decorative generated artwork, not astronomical data.

`public/media/candelr-social.png` is the earlier 1200 × 630 social preview generated by `work/create-candelr-social.cjs` in the parent workspace. It uses the project logo and independently authored gradients; none of the removed image references or scene captures are used. It is retained as a brand reference.

`public/media/candelr-og-es-v1.jpg` and `public/media/candelr-og-en-v1.jpg` are the current Spanish and English 1200 × 630 social previews, created on 30 October 2026 with the built-in image generation tool. The Spanish artwork uses the project's original hero and earlier brand preview as visual references; the English version localizes that composition. They depict an illustrative timer reading, not a live product screenshot. Original generation records, prompts, references and output hashes are recorded in `docs/asset-provenance/`. The web copies are resized JPEG exports of the generated masters. No retired third-party scene assets are used.

### Generated hero and galaxy provenance

`public/hero-horizon.png` was generated for Candelr using the integrated image-generation tool. The recorded result from 7 September 2026 identifies `candelr-hero-obsidian-mint.png`; that master and the hero image in the original landing have the same SHA-256: `90571556ba9cebe3c7604b2acef7d3b065bbf711401badb5c04c5dc7c6528da4`.

`public/media/candelr-mint-galaxy.png` was generated with `image_gen` on 8 September 2026 using Candelr’s own hero as its identity reference. Its SHA-256 is `aec2960bc94f4710b3d1d71f79d1e0deeae2132434385d328c6f432aa142bd4c`. The generation record, original result and retained project image were checked. Prompts and a file-identity manifest are included in the source distribution under `docs/asset-provenance/`.

The two images were initially removed because they had been incorrectly classified with the unverified external references. They have been restored byte-for-byte after that provenance check. They are not downloaded Aura scenes or captures of the removed Spline/Unicorn embeds. This is a factual generation record, not a third-party license, legal opinion, guarantee of exclusivity or trademark clearance.

### Orbital horizon

The immersive background option `orbital`, displayed as “Horizonte orbital” / “Orbital horizon”, is a new locally implemented Canvas 2D/CSS composition over Candelr's original galaxy image. It introduces no external scene resources or dependencies and does not copy the retired Unicorn/Spline scene code or Gateway Flow implementation. It uses the product's existing palette, intensity and motion controls. The original hero and galaxy assets are retained. Source provenance, final hashes and the validation scope are documented in `docs/asset-provenance/`. The implementation was authored for this project with AI assistance; it is not imported scene code.

These project assets are not covered by the third-party licenses above. This document does not grant a blanket redistribution license to Candelr's brand, product or written content.

## Removed reference material

On 29 October 2026, the operator instructed removal of material whose distribution rights had not been established. The current web source and delivery no longer include:

- The four Spline scenes and seven Unicorn Studio scenes, their loaders and eleven captured posters.
- The supplied Gateway Flow / Orbital flow implementation.
- The supplied Valence implementation and the adapted liquid perimeter previously used by Holo and Valence.
- Historical screenshots and recordings containing the removed material.

These items are documented only as removals; no license for them is asserted or distributed. The original user attachments and separate earlier products are outside this web-delivery cleanup. The remaining logo reveal is the separately licensed MIT/BSD implementation identified above; it is not the removed Holo/Valence effect.

## Distribution of these notices

`public/THIRD_PARTY_NOTICES.txt` is an exact copy of this document for the static export. Complete notices for the retained fonts, runtime software and reveal implementation are distributed under `public/legal/licenses/`; their sources and hashes are listed in `index.json`. Preserve these notices with redistribution of the relevant components and re-audit when dependencies or assets change. Public availability, attribution or free access alone is not treated as a license grant.