Terms of Service

Last updated: September 2026

These Terms of Service (“Terms”) govern access to and use of the Templass Website and, where you accept a quote or otherwise enter a written mitigation arrangement, the Templass remote DDoS mitigation Service. By submitting a quote request, accepting a quote in writing, using the customer Panel for Templass Service, or using the Service, you agree to these Terms. If you do not agree, do not use the Website or the Service. If you act on behalf of a company or other organisation, you confirm that you are authorised to bind that entity.

1. Scope and provider

1.1 These Terms apply to contracts and pre-contractual dealings between Templass, operated by Ali Rayan (sole trader / Kleinunternehmen under § 19 UStG), Welserstraße 3, 87463 Dietmannsried, Germany (“Templass”, “we”, “us”), and the customer or Website user (“you”, “Customer”) concerning the Website and remote DDoS mitigation services.

1.2 Provider identity, VAT ID (DE462682632), and statutory notices are set out in the Imprint.

1.3 Contact for contractual and support matters: [email protected].

1.4 Individual quotes or other written agreements prevail over these Terms where they expressly state so (including rates, commits, handoff details, and billing period). Mandatory consumer protections under German and EU law remain unaffected where you are a consumer (Verbraucher).

1.5 Always-on mitigation under these Terms is offered with connectivity via GRE or cross-connect to your Origin only (as agreed in the quote / provisioning). Other handoff types apply only if expressly agreed in writing.

2. Definitions

For these Terms:

3. Service description

3.1 Templass provides always-on remote DDoS mitigation. Clean traffic is delivered to your Origin via GRE tunnel or cross-connect, according to the agreed setup. Network identity includes ASN AS208743. Mitigation infrastructure is operated in own colocation at Equinix FR5, Frankfurt. Edge capacity is in the “Over 1 Tbps” class; that figure describes edge class and is not a per-customer commit unless your Quote expressly states a commit.

3.2 Billing is based on clean delivered bandwidth, not attack volume. Attack traffic dropped at the edge is not billed as clean bandwidth. Measurement uses the 95th percentile of clean Mbps over the billing period (see Section 7).

3.3 The Service is shared mitigation infrastructure. It is not a CDN, not a full application firewall for arbitrary web applications unless expressly agreed, and not a substitute for adequate Origin capacity or your own security practices.

3.4 We operate on a best-effort / professional-care basis for a shared platform. We do not guarantee that every attack will be fully mitigated under all conditions. Residual attack traffic, collateral filtering, capacity contention under extreme events, upstream carrier failures, and force majeure may affect outcomes. Unavailability or incomplete mitigation alone does not, by itself, constitute unlimited liability (see Section 12).

3.5 Related tooling includes the Looking Glass at lg.templass.com. Availability of Looking Glass is operational/informational and is not separately warranted unless a Quote states otherwise. Access to the Website and/or Looking Glass may be protected with Cloudflare Tunnel and Captcha / challenge (bot protection).

3.6 The customer Panel is at panel.templass.com. The Website may link to or rely on that Panel. Panel access, where offered for your Service, is part of account and Service management under these Terms and the Privacy Policy. The mitigation customer relationship is still formed by quote → written acceptance / provisioning; Panel features do not replace that formation unless a Quote expressly says otherwise.

4. Quotes and contract formation

4.1 Interested parties may request a Quote via the Website form (fields typically include use case, peak clean Mbps, connection type gre or cross-connect, name, email, and optional notes) or by email to [email protected].

4.2 Submitting a quote request is an invitation to receive an offer; it does not by itself form a mitigation contract. A mitigation contract is formed when you accept a Quote in writing (including email) and/or when we begin provisioning on the basis of that acceptance, whichever the Quote describes.

4.3 The Website may show indicative pricing and mechanics. Rates, commits, billing period, handoff details, and any minimums stated in the accepted Quote prevail over indicative Website figures if they differ.

4.4 You must provide accurate contact and technical information. We may decline or withdraw a Quote before acceptance, or condition acceptance on technical feasibility and AUP compliance.

5. Acceptable Use Policy

5.1 You must not use the Service, Website, Looking Glass, Panel, or Templass infrastructure to:

• launch, relay, amplify, or otherwise facilitate attacks against third parties;
• host, transmit, or distribute content that is unlawful under German or EU law (including, without limitation, child sexual abuse material and terrorist content);
• interfere with other customers or the shared mitigation platform (including scans, floods, or abuse directed at Templass systems);
• bypass filters or expose an unprotected Origin while advertising or using Templass addresses in a way that misleads third parties or endangers the platform;
• violate applicable export-control, sanctions, or cybercrime laws;
• abuse rate limits, Captcha / challenge protections, or Tunnel-protected surfaces.

5.2 You remain responsible for traffic and content originating from or destined to systems you protect through Templass, and for ensuring you are authorised to protect those systems and announce or use any associated addressing.

5.3 We may null-route, filter, rate-limit, quarantine, or suspend or terminate Service immediately for material AUP violations, with notice where reasonable. Where mandatory law requires otherwise (including certain consumer rights), those rules prevail.

6. Customer obligations

6.1 You will:

• provide accurate technical information (Origin addresses, ports, protocols, tunnel endpoints, prefixes, and contacts);
• route public traffic through the Templass edge as agreed and close or restrict unprotected Origin exposure after cutover where reasonably required for protection to work;
• keep billing and operational contacts reachable;
• respond promptly to abuse, security, or operational notices from Templass;
• keep RPKI/ROA and routing hygiene in order if you announce address space in connection with the Service;
• use the Service only for lawful systems you are entitled to protect;
• use Looking Glass (lg.templass.com) within rate limits and without abusing probes;
• keep Panel credentials confidential and notify us promptly of suspected unauthorised Panel access.

6.2 Misconfiguration on your side (wrong endpoints, open Origin, unpaid suspension, etc.) is outside Templass’s operational responsibility except to the extent we agreed to configure something for you and failed to do so with due care.

7. Clean-bandwidth billing and payment

7.1 Measurement. Clean bandwidth is measured at the 95th percentile of clean Mbps over the billing period. Attack traffic dropped at the edge is not included in clean measurement and is not billed as clean bandwidth.

7.2 Indicative whole-volume rates (Website / standard commercial fact base). Unless a Quote states different rates, clean bandwidth is billed on a whole-volume tier based on the measured 95th percentile clean Mbps for the period:

“Whole-volume” means the entire measured clean Mbps for the period is charged at the single rate for the tier that the measurement falls into (not a stacked progressive schedule across bands).

7.3 Monthly floor. The amount payable for a billing period is max(tiered clean-bandwidth charge, €39). The €39 figure is a floor, not an add-on stacked on top of the usage charge. If your Quote states a different minimum or omits a minimum, the Quote controls.

7.4 Quote prevails. Commits, custom rates, discounts, included Mbps, billing period length, currency presentation, and payment terms in an accepted Quote override the indicative table above. The Website may describe these mechanics for transparency; the signed Quote is binding.

7.5 Kleinunternehmen. Templass is a Kleinunternehmen under § 19 UStG; where that regime applies, invoices may not show VAT.

7.6 Payment methods. Payment method is as stated in the Quote or invoice. Available methods include Stripe, PayPal, and EU / SEPA bank transfer. This Website does not offer self-serve Essential / Standard / Premium checkout. Card and PayPal account data are handled by those providers, not stored as full PANs by Templass.

7.7 Non-payment. Failure to pay may result in suspension after notice where reasonable, and ultimately termination. You remain responsible for fees accrued up to the effective end of the contract, subject to mandatory law.

7.8 Price changes. For future periods not locked by a fixed-term Quote, we may change indicative Website rates or standard commercial terms with reasonable notice to existing customers (email to the billing contact). Material changes to an active Quote-backed arrangement require the mechanism stated in that Quote or mutual written agreement. Mandatory consumer rights remain unaffected.

8. Availability and support

8.1 We operate shared mitigation infrastructure with professional care. These Terms do not include a percentage SLA or automatic service credits. Any availability target, maintenance window practice, or credit mechanism applies only if expressly stated in your Quote or a separate written SLA.

8.2 Origin servers, your upstream providers, the public Internet outside our reasonable control, customer misconfiguration, unpaid accounts, and force majeure events are outside Templass’s responsibility for availability outcomes unless a Quote states otherwise.

8.3 Support is provided via email at [email protected]. Support does not include unlimited custom engineering, on-site work, or third-party vendor management unless included in a Quote. These Terms do not include fixed response-time SLAs.

8.4 Looking Glass (lg.templass.com) and similar tooling support transparency and operations; they are not separate availability commitments unless expressly agreed.

9. Intellectual property, customer content, and feedback

9.1 Templass and its licensors retain all rights in the Service, Website, Looking Glass, Panel, trademarks, software, filters, and related materials. No rights are granted except as needed to use the Website, Panel, or Service under these Terms.

9.2 You retain rights in your content, configurations, and Origin systems. You grant Templass a limited licence to process traffic, telemetry, and configuration data as needed to provide, secure, bill, and support the Service (see also the Privacy Policy).

9.3 Feedback, suggestions, or ideas you submit may be used by Templass to improve the Service without obligation to you, unless a separate written agreement says otherwise.

9.4 You may state that you use Templass. You may not imply partnership, endorsement, or joint venture without prior written permission, or publish non-public diagrams, credentials, or other customers’ data.

10. Data protection, Privacy Policy, AVV

10.1 Processing of personal data is described in our Privacy Policy, including Cloudflare Tunnel and Captcha (including Turnstile), Namecrane Workspace SMTP / mailbox handling, Stripe / PayPal / SEPA payments, the Looking Glass at lg.templass.com, and the Panel at panel.templass.com.

10.2 Where Templass processes personal data on behalf of a B2B customer as a processor, a separate data processing agreement (AVV / DPA) applies as required by Art. 28 GDPR. Contact [email protected] to request or execute an AVV where needed.

10.3 Network mitigation necessarily involves processing of traffic metadata and related security data. Absolute anonymity of packet-level operations is not compatible with providing DDoS protection.

11. Confidentiality

11.1 Each party shall keep confidential the other party’s non-public technical, commercial, and account information obtained in connection with the Service, and use it only to perform the contract, except where disclosure is required by law, regulators, or competent courts, or the information is or becomes public through no fault of the receiving party.

11.2 Operational security notices and abuse reports may be shared with affected parties, hosts, or authorities to the extent reasonably necessary to mitigate harm or comply with law.

12. Liability

12.1 Templass is liable without limitation for:

• intent (Vorsatz) and gross negligence (grobe Fahrlässigkeit);
• injury to life, body, or health;
• claims under the German Product Liability Act (ProdHaftG); and
• other cases where mandatory law prohibits limitation.

12.2 For slight negligence (einfache Fahrlässigkeit), Templass is liable only for breach of essential contractual obligations (Kardinalpflichten — duties whose fulfilment makes proper performance of the contract possible at all and on which you may regularly rely). In that case, liability is limited to the typical, foreseeable damage and capped at the fees paid by you to Templass in the twelve (12) months preceding the event giving rise to the claim, except where mandatory law provides otherwise.

12.3 Subject to Sections 12.1 and 12.2, Templass is not liable for lost profits, loss of data on your Origin (except to the extent caused by a Kardinalpflicht breach within the cap above), failures of your application or upstream, or the public Internet outside our reasonable control.

12.4 No guarantee of complete mitigation. Shared infrastructure realities, extreme attack volumes, novel attack techniques, force majeure, and third-party carrier failures mean that not every attack can be fully mitigated. Incomplete mitigation or temporary unavailability alone does not open unlimited damages.

12.5 These limitations also apply to our vicarious agents (Erfüllungsgehilfen). Mandatory consumer rights remain unaffected.

13. Indemnity

13.1 If you use the Service in the course of a business (B2B), you will indemnify and hold Templass harmless from third-party claims arising out of (a) your content or Origin systems, (b) your prefixes or routing announcements, or (c) your material breach of the AUP or these Terms, including reasonable legal defence costs, except to the extent the claim was caused by Templass’s intent or gross negligence.

13.2 This indemnity is B2B-leaning and does not reduce mandatory protections for consumers. If you are a consumer, statutory rules on liability and unfair terms prevail over any conflicting reading of this Section.

14. Term, termination, suspension

14.1 The term of a mitigation contract is as stated in the accepted Quote (e.g. month-to-month or fixed term). Where the Quote is silent, either party may terminate with effect at the end of the then-current billing period by written notice (email to [email protected] is sufficient), subject to any minimum term in the Quote.

14.2 Termination for cause. Either party may terminate for material breach if the other party fails to cure within a reasonable period after notice (immediate termination is permitted for AUP violations, unlawful use, or non-payment where continuation is unreasonable).

14.3 Suspension. We may suspend Service for AUP violations, non-payment, material breach, security risk to the platform or other customers, or legal compulsion, with notice where reasonable.

14.4 Effect of end of Service. On termination or expiry we may withdraw announcements, tunnels, and related access for the affected service, and may disable related Panel access for that Service. You must stop sending traffic to Templass. We may retain logs, invoices, and records as required by the Privacy Policy and German commercial / tax retention rules.

15. Changes to Terms

15.1 We may update these Terms for future contracts and, where permitted, for renewals of existing arrangements. Material changes will be announced with reasonable notice (e.g. by email to known customers and/or by updating templass.com/terms).

15.2 Continued use of the Service after the effective date constitutes acceptance of the updated Terms where permitted by law. Where mandatory law requires explicit consent or grants a special termination right, those rules apply. If you do not accept a material change affecting an active Service, you may cancel with effect from the change date by notice to [email protected] before that date, subject to fees already due for the then-current period under mandatory law and any Quote minimum term.

16. Governing law and venue

16.1 These Terms are governed by the laws of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods (CISG) and conflict-of-law rules that would lead to the application of another law.

16.2 Place of jurisdiction for merchants (Kaufleute), legal persons under public law, and special public funds is Kempten (Allgäu), Germany, where permitted by law.

16.3 Mandatory venues and protections for consumers remain unaffected.

17. Severability, entire agreement, contact

17.1 If any provision of these Terms is or becomes invalid or unenforceable, the remaining provisions continue in force. The invalid provision shall be replaced by a valid provision that comes closest to the economic purpose of the original, to the extent permitted by law.

17.2 These Terms, together with the Privacy Policy, any applicable AVV/DPA, and any express accepted Quote, constitute the entire agreement between you and Templass regarding the Service and supersede prior non-written side agreements on the same subject. Individual Quotes prevail where they expressly conflict with these Terms.

17.3 No failure or delay in enforcing a provision is a waiver of that provision.

17.4 Contact: [email protected] · Provider details: Imprint · Privacy: Privacy Policy · Terms: Terms of Service

Last updated: September 2026