Terms of Service
Last updated: 18 October 2026 · version REG-APP-FD01-310a72042c91 · working version (operator details to be completed)
§ 1. Operator and general provisions
1. These Terms set out the rules for using the HOMER application available at https://homerpro.app (the “Application”). 2. The operator of the Application is [OPERATOR], [ADRES], [KRS], [NIP], [REGON] (the “Operator”). Contact: [E-MAIL]. Support matters: [email protected]. 3. The Terms are available free of charge in the Application. Using free features does not require a purchase. Each purchase of a paid service requires acceptance of the applicable terms (§ 10 item 2).
§ 2. Definitions
— Message — content encrypted in the sender’s browser and passed to the recipient by a link. It may be opened once. — Link — an address containing the message identifier. The encryption key is in the part after the # sign, which the browser does not send to the server. — Sender — the person creating the message. Recipient — the person who opens the link. — Sender status — the page where the sender checks the state of a message and may cancel it. Access is protected by a token contained in the status link. — Reply — one reply from the recipient, encrypted with the message key. — Attachment — a file attached to a message under a PRO licence, up to 25 MB. — PRO licence — a key in the form HOMER-PRO-… in one of the forms described in § 8. — Publication services — Golden List, YouTube channel promotion and banner advertising. Each has its own terms (03, 04, 05). — Zero-knowledge — a model in which the Operator does not hold the key to message content (§ 5).
§ 3. Nature of the service
1. The Application serves the one-time, time-limited transfer of information. It is not a messenger, an archive or a data storage service. 2. The Application does not require an account. Senders and recipients do not create accounts. Login concerns only the Operator’s administrators. 3. Messages expire by design and are deleted in accordance with § 5. The Operator does not guarantee the durability of messages. 4. The Application runs in the browser. The Operator supplies the code, and the user’s browser executes it.
§ 4. Technical requirements
1. Use requires a modern browser with WebCrypto support (AES-GCM, HKDF) and enabled JavaScript. 2. The list of supported browsers: [OPERATOR] will complete it after testing. 3. The recipient must receive the full link, including the part after the # sign. Passing on the link is the responsibility of users.
§ 5. Messages, replies and status
1. Encryption. The content of a message is encrypted in the sender’s browser with the AES-256-GCM algorithm. The key is in the link after the # sign. 2. Zero-knowledge scope. The content of messages, the content of replies, and the content and name of new attachments are encrypted in the browser. The Operator has no key and cannot decrypt them, even with access to the database, files or backups. 3. Metadata (not zero-knowledge). The Operator processes: creation, opening, end-of-viewing and expiry times; status; chosen theme; viewing time; size, MIME type and object identifier of an attachment; IP address and technical request data in server logs; buyer data; data of reports voluntarily submitted. Details: Privacy Policy (02). 4. One-time reading. A message can be opened once. Opening starts the viewing timer. After it ends, the message cannot be opened again. 5. Validity period. The sender chooses a validity period from 5 minutes to 7 days. In the free version the range available is from 24 h to 48 h (in the interface: 24 h and 48 h). Other periods require a PRO licence. 6. Viewing time. In the free version: 3 minutes. Under a PRO licence: 20 s, 40 s, 8 min or 15 min. 7. Reply. The recipient may send one reply. The sender receives it on the status page. After the reply is first collected, its content is deleted from the database and cannot be downloaded again. 8. Sender status. It works until the end of the message’s life. The sender may check it repeatedly and may cancel the message. Cancellation ends the message and orders deletion of the attachment. 9. End of message. A message ends by: — (a) reading and ending the viewing; — (b) expiry of the viewing time, if viewing was not ended; — (c) expiry of the validity period; — (d) cancellation by the sender. After the end, the encrypted content and the reply are deleted from the database. The message row is deleted no later than 5 minutes after the validity period expires. Automatic deletion of content after the viewing time expires without a report from the browser is in progress. 10. Limits of the zero-knowledge model. — (a) The Operator supplies the Application code. Modified code running in the browser could pass on the key. — (b) After reading, the recipient may save or copy the content. — (c) Anyone who has the full link has access to the message. Passing on the link is the responsibility of users. — (d) Hiding content after switching tabs and copy protection make screenshots or retyping harder, but do not prevent them.
§ 6. Attachments (PRO licence)
1. Attachments are available under a PRO licence, up to 25 MB per file. 2. The file and its name are encrypted in the sender’s browser. The file key is derived from the message key (HKDF-SHA256). The key is not sent to the server. 3. The server and file storage (Cloudflare R2) keep: the encrypted file, the encrypted name, a random object identifier, size, MIME type and encryption version. 4. An attachment exists as long as the message does. Its deletion is ordered after: the end of viewing, expiry of the viewing time, expiry of the message, or cancellation of the status. Deletion is verified. Errors are recorded and retried by a periodic task. 5. Reserving space for an upload before a message exists does not use up a PRO licence. An unassigned reservation is deleted no later than 24 hours after it was made. 6. Attachments uploaded before 16.10.2026 were stored under a different model: the file key was kept in the database until the end of the message. This model is no longer used.
§ 7. Application versions and preview mode
1. Versions differ in validity period, viewing time, themes, attachments and the number of messages in a package. The current scope of each version is described in the Application. 2. Preview mode (without download) applies to images, video, audio and text, as described in the Application.
§ 8. PRO licences: types, periods and devices
1. One-time packages — Starter (10 messages), Basic (100), Pro (1000). They use up the message limit. They are not assigned to a device. They have no expiry date; they expire when the limit is used up. 2. Unlimited — a 30-day subscription, renewed automatically until cancelled. It works on one device at a time. 3. Lifetime — a one-time payment, valid indefinitely. It works on one device at a time. 4. A device may be released by the user or by the administrator. 5. Prices (PLN / EUR), as of 18.10.2026: — Starter (10 messages): 4.99 PLN / 1.99 EUR; — Basic (100 messages): 19.00 PLN / 9.99 EUR; — Pro (1000 messages): 99.00 PLN / 49.99 EUR; — Unlimited (monthly): 50.00 PLN / 19.99 EUR; — Lifetime: 299.00 PLN / 99.99 EUR. The price list shown in the Application at the time of purchase is the source of truth. Gross prices and the manner of presentation: [OPERATOR]. 6. Ending a subscription. The user may cancel Unlimited in the Application (PRO licence → Cancel subscription). Cancellation stops renewal at the end of the paid period. Access continues until the end of that period. 7. Refund. A refund of the full payment cancels the licence. Rules for a partly used package: [to be confirmed]. 8. Licence recovery. The key may be sent to the e-mail address given at purchase after a recovery process. The e-mail is not end-to-end encrypted. Recovery data is deleted in accordance with the Privacy Policy (02, § 8). Legal basis: [to be confirmed]. 9. Administrative licences may be issued by the Operator. They are not sold.
§ 9. Payments
1. Online payments are handled by Stripe, Inc. Card details are entered on the provider’s page. The Operator does not store card details. 2. New transactions are handled exclusively by Stripe. Transactions made before the Stripe implementation remain subject to the terms of Paddle.com Market Ltd., which acted as Merchant of Record. 3. Manual activation of the service without payment by an administrator is possible and is recorded in the history. 4. Seller and sales documents. The seller is [OPERATOR]. Issuer of the invoice or receipt, VAT and KSeF: [to be confirmed]. 5. Purchase confirmation. After a successful payment, the user receives at the e-mail address given at purchase a message containing: the name of the service; the price and currency; the purchase date and activation date; the period of service; the version of the Terms and the version of the Privacy Policy; the statements accepted; complaint rules; information about the right of withdrawal; the licence key. Until PRO consents are switched on, the message contains the name of the service, the price, the transaction identifier and the licence key; the remaining elements are introduced together with the PRO consents.
§ 10. Acceptance, activation and right of withdrawal
1. A consumer who concludes a distance contract may withdraw from it within 14 days in accordance with the law. 2. Conditions for purchasing PRO. Before purchase the user: — (a) accepts the HOMER Terms of Use (PRO-1); — (b) confirms that they have read the Privacy Policy (PRO-2); — (c) selects the request for immediate start of the service (PRO-3). Purchase is not possible without ticking each of these fields. Until PRO consents are switched on, ticking the request for immediate start of the service (PRO-3) is required. 3. Activation. The PRO licence is activated immediately after a successful payment. A model of activation after the withdrawal period expires is not applied. 4. Effect of the request. Ticking PRO-3 means a request that the service begin before the withdrawal period expires. Legal effects of ticking, including the effect on the right of withdrawal after the service has begun: [to be confirmed]. 5. Record of consent. From the switching on of PRO consents, for each transaction the following are recorded: the versions of the accepted statements, the time of their acceptance and the values of the consent fields. 6. Publication services (Golden List, YouTube, advertising) have their own terms and their own consent checkboxes for the start of the service (03 § 9, 04 § 9, 05 § 12).
§ 11. Complaints and conformity of digital content
1. A complaint may be submitted to [E-MAIL] or [email protected]. The Operator handles it within [OPERATOR]. 2. A complaint should contain: a description of the problem, the purchase date and the e-mail address used at purchase. Full message links should not be sent, because the part after the # sign contains the key. 3. The Service conforms to the description in the Application and in these Terms. Consumer rights arising from the provisions on digital content and digital services: [to be confirmed].
§ 12. User responsibility and prohibited use
1. Message content, names, descriptions, links and materials transmitted by a user come from that user. The Operator does not create them and does not select recipients. 2. The following are prohibited in particular: sending threats and harassment; phishing and impersonating other persons or entities; fraud; distributing malware; infringing copyright and personal rights; illegal content; using the service to commit crimes; disclosing personal data of other persons without a legal basis. Sexual content involving minors is prohibited and is reported to the competent authorities. 3. The user is responsible for the lawfulness of the content they transmit. The catalogue of consequences of breaches: [to be confirmed].
§ 13. Reporting abuse
Rules for reports and moderation are set out in procedure 07. Reporting a Golden List entry is available at each entry. The general “Report abuse” form in the footer of every page, available without an account and without the #k key, is in progress.
§ 14. Restriction of access and termination
1. The Operator may disable a public entry, channel or advertisement, or block a licence, in case of a breach of these Terms. The decision is taken by a person after review. Notification of the decision: [to be confirmed]. 2. The Operator has no access to the plaintext content of one-time messages and cannot delete them on request. Messages expire automatically in accordance with § 5. 3. Ending the operation of the Application: [OPERATOR] will set the notice period and the rules for refunding unused licences.
§ 15. Availability and technical work
The Operator makes efforts to keep the Application available. It does not guarantee uninterrupted availability. Planned maintenance is announced in the Application where possible.
§ 16. Security
1. The Operator applies encryption in the browser, HTTPS connections, request limits for sensitive routes and protection of forms. 2. No safeguard is absolute. The limits described in § 5 also apply to the security of content.
§ 17. Liability of the Operator
The Operator’s liability is limited to the extent permitted by mandatory provisions of law, including provisions protecting consumers. The Operator does not limit liability for damage to a person or for intentional fault.
§ 18. Intellectual property
Rights to the Application, its code, trademarks and graphics belong to the Operator or its licensors. The user does not acquire these rights. Theme fonts and graphics are used under licence: [OPERATOR] will confirm the scope of the licence.
§ 19. Personal data
The principles of personal data processing are set out in the Privacy and Cookies Policy (02).
§ 20. Governing law and disputes
1. Governing law: Polish law. 2. Out-of-court dispute resolution: [to be confirmed]. 3. Competent court: [to be confirmed].
§ 21. Changes to the Terms
The Operator may change the Terms. Changes do not apply to orders paid before they take effect. Method of notifying changes: [to be confirmed].
§ 22. Contact
[E-MAIL]; [email protected]; [OPERATOR], [ADRES].
Key principles
- 🔒 ONE-TIME READ — a message can be opened once; it is deleted after viewing ends
- 🛡️ ZERO-KNOWLEDGE — message content is encrypted in the browser; we do not hold the key
- 🔐 ENCRYPTION IN THE BROWSER — AES-256-GCM
- ⏰ VALIDITY PERIOD — from 5 minutes to 7 days; in the free version 24 h or 48 h