Can you explain how they have given that impression? I still don't fully understand what's going on here, but my first impression (Which seems to be the issue you have, that they are masquarading or implying that they are operating on behalf of the developer) is that they let people put bounties on bugs.
That means they are independent and third party and in no way necessarily affiliated with the project. I understood that right from the start, but I only have a 3rd person perspective on this, are the private messages different?
> Donate bitcoins to open source projects or make commits and get tips for it.
The language used is "donate to projects". If you click the "See projects" button, you get to a page with the header "Supported projects", which suggests some kind of agreement between the project and Tip4Commit.
If you click a project, you get to a page with text like "Project sponsors", and even "No sponsors yet. Be the first to support this project.". The implied "... on Tip4Commit" part is not obvious.
The only thing suggesting that Tip4Commit is not affiliated with the projects is a low-contrast message at the bottom of each page, which was added after this blew up.
I feel like we shouldn't miss the point here: you can't impersonate me and take donations in my name without my consent, no matter the currency (or regulations or whatever) being used. Make it opt-in, not "opted in by default and no way to opt out".
Firstly, you need to make abundantly obvious and clear promises as to what happens to money left it accounts. There is no reason to trust your escrow, let alone your ability to manage or secure it. I honestly still can't find it spelled out clearly, and even then it'd be hard to trust.
I suggest you pull your site before this PR gets even further out of hand, then reboot. If you continue to pursue your project, partner with a couple projects that opt-in (free publicity for you both) and work to their needs. Once you have things in order, then you can think about something more automated.
Yep! That's where the stellar comes in. It's something that everyone the network can accept and requires no trust. So as long as someone is willing to convert your gateway's credit to stellar (and worst case, your gateway should be willing to do so), you're fine.
That's assuming your gateway has stellar on hand to provide as conversion. Stripe is starting with 2% of the stellar, but (AFAIK) nobody else is starting with any significant chunk. If a gateway issues credit in exchange for real-world exchanges, I don't see why there's any expectation that they'll have stellar on-hand to use for the conversion, although perhaps they can use their real-world money to buy stellar from some other gateway.
I'm also wondering, since the amount of Stellar is capped (100 billion, right? Can this ever change?), and since 50% of Stellar is being distributed to people who sign up, it seems like a sizable portion of this Stellar will almost certainly immediately become unusable as people sign up, get their Stellar, and never come back.
Edit: Just found the bit where it says Stellar will be created at a rate of 1% annually. The fixed 100 billion cap I cited was based on earlier comments about Ripple's cap.
> That's assuming your gateway has stellar on hand to provide as conversion.
That's not the only way that gateways can talk to eachother. Given this is ripple we're talking about, anyone who has a mutual trust connection between gateways can facilitate a transaction, as can any market-making trader.
Looking at MIRI's gateway and my own showed dozens of such connections. Ripple has 100,000 users, any of which can be part of the connection between any two given gateways. Stellar is planning on growing that large and larger, so it should be expected that this will happen there, too.
Well, the real worst case is probably that the Earth gets hit by a coronal mass ejection and takes down all electronics: http://bit.ly/1qO25PH :).
But more seriously, a gateway you trust going under is indeed a risk. That's part of why you can specify not just "I trust this gateway" but also "I trust this gateway for up to 100 CAD" — you can explicitly specify your exposure.