Open-source attributions, trademark notices, source-code offer, and formal procedures for copyright or illegal-content complaints under UAE, EU, UK, and US law.
Rights in the original software, interface, documentation, branding, and other materials created for 10 Seconds belong to Sterling and Pierce Holding L.L.C-FZ or its respective licensors, to the extent protected by applicable law. Purchasing access to 10 Seconds does not transfer ownership of its proprietary software or intellectual property. Rights to use the service are governed by the Terms of Service and any applicable written agreement.
The Publisher does not claim ownership of Third-Party Components. Their inclusion does not, by itself, place the entire 10 Seconds application under an open-source licence. Any obligations affecting combined or derivative works remain governed by the actual applicable licences.
Nothing in this page restricts rights expressly granted by a Third-Party Component's licence or by mandatory law, including applicable rights relating to interoperability, observation, study, testing, or permitted reverse engineering (notably Articles 5 and 6 of EU Directive 2009/24/EC on the legal protection of computer programs, and comparable national rules).
These are the only two sub-processors used by the Publisher. We do not share user data with any other third party for marketing, advertising, profiling, analytics, or any other purpose. Full disclosure in Privacy Policy §10 and DPA Annex 3.
| Library | Role | Licence (SPDX) | Project page |
|---|---|---|---|
| Flask | Web framework | BSD-3-Clause | flask.palletsprojects.com |
| Flask-SocketIO | WebSocket relay | MIT | flask-socketio.readthedocs.io |
| Flask-Login | Session management | MIT | flask-login.readthedocs.io |
| mysql-connector-python | Database driver | GPL-2.0-or-later WITH FOSS-exception | dev.mysql.com/doc/connector-python |
| cryptography (Fernet, AES, TLS primitives) | Encryption at rest, hashing primitives | Apache-2.0 OR BSD-3-Clause | cryptography.io |
| bcrypt | Password hashing | Apache-2.0 | github.com/pyca/bcrypt |
| requests | HTTP client (webhooks, FX) | Apache-2.0 | requests.readthedocs.io |
| python-dotenv | Env-var loader | BSD-3-Clause | github.com/theskumar/python-dotenv |
| Pillow (PIL fork) | Image handling | HPND | python-pillow.org |
| pytz | Timezone data | MIT | pythonhosted.org/pytz |
| python-dateutil | Date utilities | Apache-2.0 OR BSD-3-Clause | dateutil.readthedocs.io |
Exact installed versions are listed in requirements.txt of the deployed build. Where any Apache-2.0 library has been modified by the Publisher, a NOTICE file is kept in the repository as required by §4 of the Apache-2.0 licence. No modification of GPL-licensed code is distributed to users (the MySQL connector is used as an unmodified client library only, under the FOSS exception).
| Library | Role | Licence (SPDX) | Project page |
|---|---|---|---|
| TweetNaCl.js | End-to-end encryption (Curve25519 / XSalsa20 / Poly1305) | Unlicense (public domain) | tweetnacl.js.org |
| tweetnacl-util | Encoding helpers for TweetNaCl | Unlicense | github.com/dchest/tweetnacl-util-js |
| CryptoJS | PBKDF2-SHA256 derivation + client-side AES-GCM for private-key wrap | MIT | github.com/brix/crypto-js |
| Socket.IO client | WebSocket relay client | MIT | socket.io |
SIL-OFL-1.1. rsms.me/inter. "Google Fonts" is a trademark of Google LLC; its CDN is used only to deliver the font file.To eliminate any doubt:
Where an applicable licence requires the provision of corresponding source code, modification notices, installation information, or a written source offer, the Publisher provides those materials in the manner, scope, and timeframe required by that licence.
In the current deployment, all client-side JavaScript libraries used by 10 Seconds (TweetNaCl.js, tweetnacl-util, CryptoJS, Socket.IO client) are delivered to the browser in their standard upstream form and may be inspected via the browser's developer tools. Server-side open-source libraries are used as unmodified upstream packages installed from their official distribution channels.
"10 Seconds", "Clear Trail", "Ghost Protocol", "Sterling and Pierce", and the related logos are trademarks of Sterling and Pierce Holding L.L.C-FZ. "Stripe" is a trademark of Stripe, Inc.; "CoinPayments" of CoinPayments.net Inc.; "Google", "Google Fonts" and "Inter"-as-distributed of Google LLC; "Flask", "Pallets", "SocketIO" and the respective library names are the trademarks of their respective owners. Mention of a third-party mark is for identification only and does not imply endorsement, affiliation, or sponsorship. Required licence attributions must not be removed or altered in breach of the applicable licence.
Many Third-Party Components are supplied by their authors under licences containing broad warranty disclaimers and limitations of liability. Those provisions apply only within their lawful scope and must be read in their original licence context.
A component author's disclaimer does not automatically disclaim the Publisher's own obligations for the paid 10 Seconds service. The Publisher's contractual obligations are governed by the applicable agreement and mandatory law (notably consumer-protection, security-conformity, and data-protection requirements that cannot lawfully be excluded).
The inclusion of a Third-Party Component does not constitute a guarantee that it is free from vulnerabilities, defects, or interruptions. It also does not justify disregarding the Publisher's applicable security, conformity, maintenance, or other legal obligations.
If you believe that content hosted or transmitted through 10 Seconds infringes a copyright or neighbouring right you own or are authorised to represent, send a notification to contact@10seconds.io with the subject line COPYRIGHT NOTIFICATION — [jurisdiction] — [reference].
Designated DMCA Agent: notifications may be sent to contact@10seconds.io. The Publisher reserves the right to formally register an agent with the US Copyright Office DMCA Agent Directory where its operations fall within the US DMCA safe-harbour regime; where that registration applies, its details will be published here.
Counter-notification (17 U.S.C. §512(g)): a user whose content was removed following a DMCA notice may submit a counter-notification containing the elements of §512(g)(3). On receipt, the Publisher may restore the material unless the original complainant files a court action within the statutory window.
Repeat infringers (17 U.S.C. §512(i)): the Publisher maintains a policy of terminating, in appropriate circumstances, the accounts of users who are determined to be repeat infringers.
False claims (17 U.S.C. §512(f)): any person who knowingly materially misrepresents that material is infringing — or that it was removed by mistake — may be liable for damages, including costs and attorneys' fees.
Properly substantiated notifications under Article 16 give the Publisher actual knowledge or awareness within the meaning of Article 6 DSA. The Publisher takes timely, diligent, non-arbitrary, and objective action, and provides a statement of reasons under Article 17 DSA where it removes, disables access to, demotes, suspends, or terminates. UK equivalents under the Online Safety Act 2023 and the Copyright, Designs and Patents Act 1988 (CDPA) are handled with the same diligence standard where applicable.
Rights-holders may send notifications to contact@10seconds.io, and may in parallel pursue remedies with the UAE Ministry of Economy's Copyright Department, the competent Dubai or UAE federal court, or the TDRA where applicable.
Reports of other categories of illegal or harmful content (fraud, threats, non-consensual intimate images, hate speech, terrorism, etc.) are handled under the Acceptable Use Policy and the Law Enforcement Guidelines.
The Publisher acknowledges receipt of validly substantiated notifications within 14 business days, and acts on them as required by the applicable legal regime and within applicable statutory deadlines. Deficient or abusive notifications are returned with an explanation. Receiving a notice does not constitute an admission of liability.
The Publisher reserves the right to decline, narrow, or challenge a notification where it lacks jurisdiction, is manifestly unfounded, abusive, overbroad, or inconsistent with applicable fundamental rights. Submitting deliberately false, misleading, or bad-faith notifications to obtain suppression of lawful content or to harm another user is prohibited and may give rise to liability under the applicable law (notably 17 U.S.C. §512(f) for the US, misuse of Article 16 DSA for the EU, and civil liability under UAE law).
If you believe your trade mark is being used on 10 Seconds in a way that infringes your rights (not in good-faith descriptive use covered by Section 9), contact contact@10seconds.io with the subject line TRADEMARK COMPLAINT — [jurisdiction], including proof of your rights (registration number, jurisdiction, class), identification of the alleged infringing use, and your contact details.
Open-source libraries listed above are the intellectual property of their respective authors, used under the terms of the licences identified. No library author is a sub-processor, a controller, a joint controller, or a partner of the Publisher merely by virtue of the Publisher's use of their library. Incorporating a third-party library does not, by itself, mean that the library's author receives user data or participates in communications.
Where a library makes a network call to a third-party service (for example, loading the Inter font from Google Fonts), that call is subject to the third party's own notices (see Cookies Policy §5). External payment providers, network operators, and users' devices may process or retain information independently; our ephemeral-messaging design does not represent a promise about those independent systems. Any actual external processing is accurately described in the Privacy Policy.
This document is updated when the open-source stack, trademark references, or applicable procedures change. Material changes do not retroactively alter the handling of notifications already submitted or rights granted under an applicable third-party licence.
A Software Bill of Materials (SBOM) listing exact installed library versions is maintained by the engineering team and is available on reasonable written request to contact@10seconds.io for the purposes of security research, due-diligence by Enterprise customers, or supplier-chain audits (notably under Regulation (EU) 2024/2847 — Cyber Resilience Act where applicable in future). The SBOM is not released publicly for operational-security reasons.
If you identify a factual error (an outdated version number, a missing attribution, a defunct link, or a mis-stated licence), please contact contact@10seconds.io and we will correct it.
This document is governed by the laws of the United Arab Emirates. This choice does not displace the governing-law or jurisdiction provisions contained in a third-party licence where those provisions are applicable to that component.
Consumers retain the protections and remedies that cannot lawfully be waived under applicable European Union, United States federal or state, United Kingdom, UAE, or other applicable law. Nothing in this document excludes mandatory remedies or non-waivable rights of complainants, authors, or users.
This document does not impose a separate arbitration agreement, an exclusive foreign forum, a class-action waiver, or a waiver of statutory consumer rights.
Version 2026.14 · Effective 2026-10-22.
Published by Sterling and Pierce Holding L.L.C-FZ, Meydan Free Zone, Dubai (UAE).
Contact: contact@10seconds.io — single point of contact for all matters.