Use once carefully and lawfully.

once lets a sender encrypt text in the browser, store the encrypted record for a chosen period, and create a private link. The first successful reveal deletes the encrypted live record before the recipient's browser decrypts it. Expired, revealed, or otherwise unavailable notes cannot be recovered through the service.

• Use a strong password and protect both the password and private link.
• Send the password and link separately when the situation warrants it.
• Share only content you are legally permitted to share.
• Verify the recipient and treat any revealed copy as outside once's control.
• Keep your own copy when loss would cause harm or breach an obligation.

Do not use once to:

• break the law or help another person break the law;
• distribute malware, stolen credentials, phishing material, or instructions for abuse;
• exploit, threaten, harass, defraud, or violate another person's privacy or rights;
• share child sexual abuse material or any content that exploits a minor;
• probe, overload, bypass limits, disrupt, or gain unauthorized access to the service;
• misrepresent once as providing a certification, guarantee, escrow, or regulated archive.

Access may be restricted and encrypted records may be removed when reasonably necessary to protect the service, users, or others, or to respond to a valid legal requirement. Because the operator cannot read note plaintext through normal operation, moderation may be based on reports, metadata, traffic patterns, or the sharing context.

The service is provided free of charge and may be changed, limited, suspended, or stopped. Expiration, one-time deletion, outages, browser incompatibility, lost passwords, lost link fragments, or operational failure can make a note permanently unavailable. There is no promise of uptime, delivery, retention, recovery, or continued availability.

To the fullest extent allowed by applicable law, once is provided “as is” and “as available,” without express or implied warranties. The security design reduces specific risks; it does not make every device, recipient, browser, network, password, or use case secure.

To the fullest extent allowed by applicable law, the operator is not liable for indirect, incidental, special, consequential, or punitive loss, or for loss of data, access, revenue, or opportunity arising from use of or inability to use once. Nothing here excludes liability that cannot legally be excluded.

These terms may change when the service or its risks change. The update date above shows the current version. Continued use after an update means you accept the revised terms. Questions can be sent to me@asabbagh.com. Operator details are in the legal notice.