Skip to content
EU VETTED

Herohero

Herohero a.s. (ID 096 44 156), Mánesova 917/28, Vinohrady, 120 00 Prague 2, Czech Republic; contracting also as Herohero, Inc., a Delaware corporation

Membership platforms · Czechia
Founded 2021 · herohero.co

Czech creator membership platform (Herohero a.s., Prague): flat 10% all-in fee and strong local reach, but the terms also contract through a Delaware corporation and content sits on Google Storage.

Herohero is operated by a US-incorporated entity and remains directly subject to the CLOUD Act. It is listed under Membership platforms.

Assessment notes

Herohero is the Czech membership platform for creators, founded in Prague in 2021 by the founders of GoOut and dominant in the Czech and Slovak market, with a flat 10% fee that includes the payment cost. The Czech company, Herohero a.s., is genuinely Czech-founded and Czech-run. The problem is what the terms say next: the agreement is with Herohero a.s. or with Herohero, Inc., a Delaware corporation, jointly and severally, with the US terms governed by the law of the State of New York. A US-incorporated entity is therefore a contracting party to the service, which is direct CLOUD Act exposure by definition rather than by inference. The named processor chain reinforces it: the privacy section names Mux (US video infrastructure), Google Storage (US object storage holding creator content), Google Analytics and Spotify, with Stripe as the sole payment processor and identity-verification provider, and the site fronted by Cloudflare: Direct. No DPA, no sub-processors list, no stated hosting region.

Findings

CLOUD Act
Ownership
Sub-processors
7 · 6 US

Verified signals

Jurisdiction
  • EU / adequacy hosting: Yes
  • EU / adequacy operator: Yes
  • No US CLOUD Act exposure: No
Transparency
  • Public DPA: No
  • Sub-processors disclosed: No
  • Open-source clients: No
  • Third-party certification: No
Jump to

About Herohero

Herohero is the Czech membership platform for creators, launched in February 2021 by Vojtěch Otevřel and Vojtěch Knyttl, previously founders of the cultural platform GoOut. It is built around paid subscriptions to a creator's feed: supporters pay monthly and get access to posts, long-form video and audio hosted on the platform, with free trials, messaging and mobile apps. In the Czech and Slovak markets it is the default answer to Patreon, and much of the country's podcasting, journalism and commentary sits there. The pricing is a single flat 10% of every pledge, which already includes the Stripe fee, and Herohero acts as merchant of record for VAT.

Read the first paragraph of the terms and the sovereignty picture changes. The agreement is between the user and Herohero a.s., the Prague company registered under ID 096 44 156, or Herohero, Inc., a Delaware corporation, described as separately and jointly the contracting party. Czech terms are governed by Czech law and US terms by the law of the State of New York. Whatever the commercial rationale, the effect for a European creator is that a US-incorporated company is party to the service agreement, which places the relationship inside direct US legal reach rather than adjacent to it. This is not a hidden sub-processor; it is on the first page of the contract.

The technical chain points the same way. The privacy section names Mux for video infrastructure, Google Storage for object storage, meaning creator content, Google Analytics, and Spotify, all US-operated except Spotify. Stripe is the sole payment processor and also runs creator identity and age verification, and the prohibited-business list is Stripe's rather than Herohero's own. The site is served through Cloudflare, and Herohero publishes no DPA, no sub-processors list, and no statement of hosting region: Direct. Best fit: Czech and Slovak creators whose paying audience is already on Herohero, where reach and a single all-in fee outweigh the jurisdictional questions. Creators picking a platform on sovereignty grounds should look at the France-hosted and Netherlands-run options in this category first.

Sub-processor map · 7

  • Cloudflare, Inc. US
    United States

    CDN and DDoS protection in front of herohero.co and static.herohero.co

  • Google Ireland Limited (Google Analytics) US
    Ireland

    Website and app analytics

  • Google Ireland Limited (Google Workspace) US
    Ireland

    Corporate and support email (from public MX and SPF records)

  • Google LLC (Google Cloud Storage) US
    United States

    Object storage for creator content; region not disclosed

  • Mux, Inc. US
    United States

    Video encoding, hosting and delivery

  • Stripe, Inc. US
    United States

    Payment processing for all pledges, plus creator identity and age verification

  • Spotify AB EU
    Sweden

    Podcast distribution integration for creator audio

Source: the vendor’s published sub-processor list, read 10 Aug 2026.

6 of 7 sub-processors are US-owned or US-based. CLOUD Act exposure applies.

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-08-10).

Capability matrix

Table 2Capabilities of Herohero

Recurring memberships Yes
One-off tips No
Pay-per-post No
Members-only content hosting Yes
Digital shop No
Connect your own payment account No
VAT collected and remitted for you Yes

Integration & access

REST API No
SSO (SAML / OIDC) No

Compliance & governance

Audit log No
Self-host / on-prem option No

Pricing & tiers

Custom pricing

Contact vendor for tier or volume pricing.

View pricing page

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    static.herohero.co/docs…
    Open

Alternatives in this category

  • Ko-fi
    United Kingdom · $12/mo
    EU-Hosted
    Public DPA: No Sub-processors: No Open source: No
  • Liberapay
    France
    EU-Hosted
    Public DPA: No Sub-processors: Yes Open source: Yes
  • Patronite
    Poland
    EU-Hosted
    Public DPA: No Sub-processors: No Open source: No
See all membership platforms alternatives