Terms of Service

Last updated: 15 August 2026

Welcome to ReadOnce.eu (“Service”, “we”, “us”, “our”), operated by BiLOUD SRL (VAT: RO34723223, Registration No. J2015002244239), a company registered in Romania. By accessing or using the Service you agree to these Terms. If you do not agree, do not use the Service.

1. Service Description

ReadOnce provides self-destructing, end-to-end encrypted sharing in two tiers:

1.1 Free (forever)

• No account required. No email, name, password, or other personal data is needed to create or open a free note.
• Encrypted text notes with optional attachments (up to 10 files and 2 GB total per note). Unlimited notes — no account means no meter.
• AES-256-GCM in the browser; the decryption key lives in the URL fragment (#…), which browsers do not send to servers.
• Intended for a single reveal, then permanent deletion. Unread free notes expire after 7 days.

1.2 Premium

• Encrypted upload of large files or folders (plan limits from 500 GB up to 5 TB total per share, up to 100 files) with unread expiry from 3 to 10 days, depending on plan. Resumable uploads/downloads and unlimited monthly transfer (no fair-use bandwidth meter). See Plans and Security.
• Access requires proving an active subscription entitlement tied to an email (one-time code and optional passkey).
• Subscription checkout, invoicing, EU VAT handling (including reverse charge where applicable), and license/access-key lifecycle are provided through LeadHosts billing. LeadHosts operates as our billing platform under applicable GDPR obligations for billing/PII it processes.
• No account-linked file history: Completing an upload stores an anonymous encrypted object plus operational metadata (plaintext byte length, chunk layout, expiry — not filenames or contents). After finalize, the share is not retained as an account-linked content history. Possession of the share link (with key) enables access — not a logged-in content library. Burn occurs after a successful download completion in the recipient’s browser (size check and, for new shares, a client-side integrity proof). An interrupted download does not destroy the share.

2. Plans, Pricing & Billing

• Current plan limits and monthly prices (excl. VAT) are published on our Plans page. Paid plans include unlimited monthly transfer (no fair-use bandwidth meter).
• Premium is a paid subscription. Prices exclude VAT; LeadHosts billing applies the correct EU VAT treatment for the customer.
• We may change plans or prices prospectively; material changes will be reflected on the Plans page and, for paying customers, through the billing relationship.
• Checkout and entitlement run through LeadHosts billing against your billing email / license record. Abuse or unpaid/cancelled entitlements may result in loss of Premium upload access.

3. Acceptable Use

You may use the Service only for lawful purposes. You shall not use ReadOnce.eu to:

• Violate applicable law or regulation.
• Distribute malware, phishing material, or other harmful content.
• Harass, threaten, defame, or abuse others.
• Infringe intellectual property or other rights of third parties.
• Spam, overload, probe, or attack the Service or related infrastructure.
• Facilitate illegal transactions or activity.

Because of zero-knowledge encryption we cannot inspect ciphertext. We may still restrict access, cooperate with lawful requests, and protect the platform’s integrity using operational signals (e.g. abuse patterns, infrastructure logs).

4. How Encryption Works

1. Your browser generates a cryptographically random key (Web Crypto API).
2. Key material is stretched with PBKDF2 (SHA-256, 100,000 iterations) and a random salt.
3. Content is encrypted with AES-256-GCM (confidentiality + authenticated encryption). Premium large files are encrypted in chunks.
4. Servers receive ciphertext and non-secret crypto parameters (IV/salt) and, for files, encrypted blobs. Filenames are sent as ciphertext. We also store the plaintext byte length and chunk layout so we can accept and serve chunks — that is size metadata, not file contents.
5. Premium shares may include a client-computed integrity proof (SHA-256 over plaintext chunks). That proof is encrypted with the same share key before upload. We store only that ciphertext. We cannot read the hashes, so we cannot fingerprint your content. The recipient’s browser decrypts and compares the proof locally before burn. A plaintext checksum on our servers would break zero-knowledge; we do not do that.
6. The decryption key remains in the URL fragment and is not intended to be transmitted to our servers.

Important: Anyone with the full link can decrypt the payload once. Share links only over channels you trust.

5. Data Retention & Destruction

• Free notes: Deleted when revealed/destroyed by the recipient flow, or automatically after 7 days if unread.
• Premium shares: Deleted when destroyed after download / explicit destroy, or automatically when their unread TTL elapses (3–10 days by plan).
• We do not keep ciphertext backups of notes/shares for restore after destruction.
• Incomplete Premium uploads may be purged after 14 days without upload activity (a multi-day transfer stays alive while chunks keep arriving).
• Premium account/billing data (email, session, optional passkeys, license status) is retained as needed to operate login and entitlement — separate from share ciphertext. Billing records held by LeadHosts follow LeadHosts’ retention and legal requirements.

6. Accounts, Sessions & Passkeys (Premium only)

• Free never requires an account.
• Premium login uses email one-time codes and may allow registering a passkey. A passkey can sign you in on a later visit without typing your email again.
• You may choose a “stay signed in” session (up to 30 days) on a trusted device.
• OTP messages are sent from our transactional mail identity for the ReadOnce domain (mailbox addresses are not listed publicly).

7. No Warranty

The Service is provided “as is” and “as available” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant uninterrupted, error-free, or perfectly secure operation.

8. Limitation of Liability

To the fullest extent permitted by law, BiLOUD SRL and operators of ReadOnce.eu shall not be liable for indirect, incidental, special, consequential, or punitive damages, or loss of profits, data, or goodwill, arising from use of the Service, unauthorized access, transmission failures, malware, or premature/unintended destruction of a note or share.

9. Intellectual Property

The ReadOnce name, branding, and site materials are our property. Encrypted content you create remains yours. You grant us only the limited technical right to store and transmit ciphertext as needed to provide the Service until deletion.

10. Availability & Changes

We may modify, suspend, or discontinue parts of the Service. We may update these Terms; the “Last updated” date will change when we do. Continued use after posting constitutes acceptance of the revised Terms.

11. Rate Limiting & Abuse Prevention

We may rate-limit OTP sends, uploads, or other actions to protect availability and prevent abuse.

12. Indemnification

You agree to indemnify and hold harmless ReadOnce.eu / BiLOUD SRL from claims and costs arising from your misuse of the Service or violation of these Terms.

13. Governing Law

These Terms are governed by the laws of Romania and applicable EU law. Disputes are subject to the competent courts in Romania, without prejudice to mandatory consumer protections that may apply.

14. Operator

• Company: BiLOUD SRL
• VAT: RO34723223
• Registration: J2015002244239

Questions about subscriptions or invoices: use your LeadHosts billing support channel.