Terms of Service

Last updated: September 2026

These Terms of Service (“Terms”) govern access to and use of Templass remote DDoS mitigation and related network services, the customer Panel, and associated Templass online offerings. By creating a Panel account, purchasing a plan, or using the Service, you agree to these Terms. If you do not agree, do not use the Service. If you act on behalf of a company or other organisation, you confirm that you are authorised to bind that entity.

Related documents: Privacy Policy · Imprint · Service / SLA page on templass.com (where published)

1. Scope and provider

1.1 These Terms apply to all contracts between Templass, operated by Ali Rayan (sole trader / Kleinunternehmen under § 19 UStG), Welserstraße 3, 87463 Dietmannsried, Germany (“Templass”, “we”, “us”), and the customer (“you”, “Customer”) for remote DDoS mitigation and related network services.

1.2 Provider identity, VAT ID (DE462682632), and statutory notices are set out in the Imprint.

1.3 Contact for contractual and support matters: [email protected]. Community / support channel: Discord.

1.4 Individual Custom quotations or written agreements prevail over these Terms where they expressly state so. Mandatory consumer protections under German and EU law remain unaffected where you are a consumer (*Verbraucher*).

2. Definitions

For these Terms:

3. Services description

3.1 Templass provides always-on remote DDoS mitigation at Layers 3 through 7. The primary scrubbing edge is located in Frankfurt (Equinix FR5). Clean traffic is delivered to your Origin via GRE tunnel or cross-connect, according to the agreed setup and Plan.

3.2 Attack volume does not count as clean bandwidth on standard Plans. Clean-bandwidth limits, included features, and pricing for Essential (€25 / month), Standard (€50 / month), Premium (€100 / month), and Custom are as stated on the pricing page and in the Panel. Plan specifications may be updated there; these Terms do not freeze historical Mbps figures.

3.3 The Service is shared mitigation infrastructure. It is not a content delivery network (CDN), not a full application firewall for arbitrary web applications unless expressly agreed, and not a substitute for adequate Origin capacity or your own security practices.

3.4 We operate on a best-effort / professional-care basis for a shared platform. We do not guarantee that every attack will be fully mitigated under all conditions. Residual attack traffic, collateral filtering, capacity contention under extreme events, upstream carrier failures, and force majeure may affect outcomes. Unavailability or incomplete mitigation alone does not, by itself, constitute unlimited liability (see Section 13).

3.5 Related Templass properties include the Website, Panel, Documentation, Looking Glass, and Status page. Availability of Looking Glass and Documentation is operational/informational and is not separately warranted unless a Custom agreement states otherwise.

4. Account and Panel

4.1 To use paid Services you must create and maintain a Panel account with accurate registration and billing data. You are responsible for safeguarding credentials and for all activity under your account, except where caused by our proven breach of security duties.

4.2 The Panel provides account, billing, and operational views (including, depending on provisioning: attack telemetry, firewall / filtering controls, rate limiting, and port or configuration requests). Some operational tabs or capabilities are administratively provisioned and may not be available to every account by default.

4.3 You must restrict Panel access to authorised operators and notify us promptly if you suspect unauthorised access. We may suspend access if we reasonably believe an account is compromised or used in breach of these Terms.

4.4 You must be of legal age and capacity to enter into a binding contract under applicable law. If you register for a business, you confirm authority to bind that business.

5. Acceptable Use Policy

5.1 You must not use the Service, Panel, or Templass infrastructure to:

• launch, relay, amplify, or otherwise facilitate attacks against third parties;
• host, transmit, or distribute content that is unlawful under German or EU law (including, without limitation, child sexual abuse material and terrorist content);
• bypass filters or expose an unprotected Origin while advertising or using Templass addresses in a way that misleads third parties or endangers the platform;
• interfere with other customers or the shared mitigation platform (including scans, floods, or abuse directed at Templass systems);
• violate applicable export-control, sanctions, or cybercrime laws.

5.2 You remain responsible for traffic and content originating from or destined to systems you protect through Templass, and for ensuring you are authorised to protect those systems and announce or use any associated addressing.

5.3 We may null-route, filter, rate-limit, quarantine, or suspend or terminate Service immediately for material AUP violations, with notice where reasonable. Where mandatory law requires otherwise (including certain consumer rights), those rules prevail.

6. Customer obligations

6.1 You will:

• provide accurate technical information (Origin addresses, ports, protocols, tunnel endpoints, prefixes, and contacts);
• route public traffic through the Templass edge as agreed and close or restrict unprotected Origin exposure after cutover where reasonably required for protection to work;
• maintain valid payment details and keep billing contacts reachable;
• respond promptly to abuse, security, or operational notices from Templass;
• keep RPKI/ROA and routing hygiene in order if you announce address space in connection with the Service;
• use the Service only for lawful systems you are entitled to protect.

6.2 Misconfiguration on your side (wrong endpoints, open Origin, unpaid suspension, etc.) is outside Templass’s operational responsibility except to the extent we agreed to configure something for you and failed to do so with due care.

7. Billing, plans, 95th percentile, overages, Stripe

7.1 Plans. Published Plans include Essential (€25 / month), Standard (€50 / month), Premium (€100 / month), and Custom. The main commercial difference among standard Plans is clean Mbps capacity and related limits as shown on the pricing page and in the Panel. Custom covers higher commits, topology, or handoff arrangements as quoted.

7.2 Billing cycle. Unless otherwise agreed in writing or in a Custom quote, Plans are billed monthly in advance. Subscriptions auto-renew each billing period until cancelled under Section 15.

7.3 95th percentile. Clean bandwidth is measured at the 95th percentile over the billing period (consistent with common transit practice: the highest samples in the top percentile band are disregarded as described in our public FAQ / documentation; the remaining peak sets the measured value).

7.4 Overages. Clean usage above the Plan limit is billed at €0.50 per Mbps above the Plan limit unless a Custom quote states otherwise. Attack traffic is not the billed object for clean-bandwidth measurement.

7.5 Payment processing. Payments are processed via Stripe Checkout and the Stripe Customer Portal. Invoices and payment status are available through the Panel / Stripe as configured. Templass is a Kleinunternehmen under § 19 UStG; where that regime applies, invoices may not show VAT.

7.6 Non-payment. Failure to pay may result in suspension after notice where reasonable, and ultimately termination. You remain responsible for fees accrued up to the effective end of the subscription, subject to mandatory law.

7.7 Price changes. We may change Plan prices or overage rates for future billing periods. Material price changes will be announced with reasonable notice via the Panel and/or email (see also Section 16 and the Appendix for open operator decisions on exact notice periods). Continued use after the effective date constitutes acceptance where permitted by law; mandatory consumer rights remain unaffected.

8. Availability, maintenance, status page

8.1 We operate shared mitigation infrastructure in Frankfurt with redundant capacity appropriate to a professional network service. Availability targets, exclusions, and any service credits are defined on the Service / SLA page on templass.com (or in a Custom agreement), not invented in these Terms. If no SLA credit mechanism applies to your Plan or Custom contract, statutory warranty and liability rules apply within the limits of Section 13.

8.2 Planned maintenance is announced when practicable via the Status page (status.templass.com) and/or Discord. Emergency maintenance may be required without prior notice to contain attacks or protect the shared platform.

8.3 Origin servers, your upstream providers, the public Internet outside our reasonable control, customer misconfiguration, unpaid accounts, and force majeure events are outside Templass’s SLA scope unless a Custom agreement states otherwise.

8.4 Current operational health is published on the Status page. Looking Glass (lg.templass.com) and Documentation (docs.templass.com) support transparency and operations; they are not separate availability commitments unless expressly agreed.

9. Support

9.1 Standard support is provided via Discord and email at [email protected].

9.2 Under Attack requests are prioritised when you use the designated Under Attack channel / contact path and provide required technical details (e.g. Origin IP, ports, current host, and a short description of what you observe).

9.3 Support does not include unlimited custom engineering, on-site work, or third-party vendor management unless included in a Custom agreement. Response times, if any, may be described on the Service / SLA page; these Terms do not invent fixed SLA minutes.

10. Intellectual property, customer content, and feedback

10.1 Templass and its licensors retain all rights in the Service, Panel, Website, Documentation, trademarks, software, filters, and related materials. No rights are granted except as needed to use the Service under these Terms.

10.2 You retain rights in your content, configurations, and Origin systems. You grant Templass a limited licence to process traffic, telemetry, and configuration data as needed to provide, secure, bill, and support the Service (see also the Privacy Policy).

10.3 Feedback, suggestions, or ideas you submit may be used by Templass to improve the Service without obligation to you, unless a separate written agreement says otherwise.

10.4 You may state that you use Templass. You may not imply partnership, endorsement, or joint venture without prior written permission, or publish non-public diagrams, credentials, or other customers’ data.

11. Data protection, Privacy Policy, AVV

11.1 Processing of personal data is described in our Privacy Policy.

11.2 Where Templass processes personal data on behalf of a B2B customer as a processor, a separate data processing agreement (AVV / DPA) applies as required by Art. 28 GDPR. Contact [email protected] to request or execute an AVV where needed.

11.3 Network mitigation necessarily involves processing of traffic metadata and related security data. Absolute anonymity of packet-level operations is not compatible with providing DDoS protection.

12. Confidentiality

12.1 Each party shall keep confidential the other party’s non-public technical, commercial, and account information obtained in connection with the Service, and use it only to perform the contract, except where disclosure is required by law, regulators, or competent courts, or the information is or becomes public through no fault of the receiving party.

12.2 Operational security notices and abuse reports may be shared with affected parties, hosts, or authorities to the extent reasonably necessary to mitigate harm or comply with law.

13. Liability

13.1 Templass is liable without limitation for:

• intent (*Vorsatz*) and gross negligence (*grobe Fahrlässigkeit*);
• injury to life, body, or health;
• claims under the German Product Liability Act (ProdHaftG); and
• other cases where mandatory law prohibits limitation.

13.2 For slight negligence (*einfache Fahrlässigkeit*), Templass is liable only for breach of essential contractual obligations (*Kardinalpflichten* - duties whose fulfilment makes proper performance of the contract possible at all and on which you may regularly rely). In that case, liability is limited to the typical, foreseeable damage and capped at the fees paid by you to Templass in the twelve (12) months preceding the event giving rise to the claim, except where mandatory law provides otherwise.

13.3 Subject to Sections 13.1 and 13.2, Templass is not liable for lost profits, loss of data on your Origin (except to the extent caused by a Kardinalpflicht breach within the cap above), failures of your application or upstream, or the public Internet outside our reasonable control.

13.4 No guarantee of complete mitigation. Shared infrastructure realities, extreme attack volumes, novel attack techniques, force majeure, and third-party carrier failures mean that not every attack can be fully mitigated. Incomplete mitigation or temporary unavailability alone does not open unlimited damages.

13.5 These limitations also apply to our vicarious agents (*Erfüllungsgehilfen*). Mandatory consumer rights remain unaffected.

14. Indemnity

14.1 If you use the Service in the course of a business (B2B), you will indemnify and hold Templass harmless from third-party claims arising out of (a) your content or Origin systems, (b) your prefixes or routing announcements, or (c) your material breach of the AUP or these Terms, including reasonable legal defence costs, except to the extent the claim was caused by Templass’s intent or gross negligence.

14.2 This indemnity is B2B-leaning and does not reduce mandatory protections for consumers. If you are a consumer, statutory rules on liability and unfair terms prevail over any conflicting reading of this Section.

15. Term, renewal, termination, suspension

15.1 Monthly Plans renew automatically at the end of each billing period unless cancelled.

15.2 Cancellation by you. You may cancel via the Panel with effect at the end of the current billing period (or as the Panel / Stripe Customer Portal otherwise allows). Custom agreements may specify different notice or term rules.

15.3 Termination for cause. Either party may terminate for material breach if the other party fails to cure within a reasonable period after notice (immediate termination is permitted for AUP violations, unlawful use, or non-payment where continuation is unreasonable).

15.4 Suspension. We may suspend Service for AUP violations, non-payment, material breach, security risk to the platform or other customers, or legal compulsion, with notice where reasonable.

15.5 Effect of end of Service. On termination or expiry we may withdraw announcements, tunnels, and Panel access for the affected service. You must stop sending traffic to Templass. We may retain logs, invoices, and account records as required by the Privacy Policy and German commercial / tax retention rules.

16. Changes to Terms

16.1 We may update these Terms with effect for future billing periods. Material changes will be announced via the Panel and/or email with reasonable notice.

16.2 Continued use of the Service after the effective date constitutes acceptance of the updated Terms where permitted by law. Where mandatory law requires explicit consent or grants a special termination right, those rules apply. If you do not accept a material change, you may cancel with effect from the change date by notice (email to [email protected] or Panel cancellation) before that date, subject to fees already due for the then-current period under mandatory law.

17. Governing law and venue

17.1 These Terms are governed by the laws of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods (CISG) and conflict-of-law rules that would lead to the application of another law.

17.2 Place of jurisdiction for merchants (*Kaufleute*), legal persons under public law, and special public funds is Kempten (Allgäu), Germany, where permitted by law.

17.3 Mandatory venues and protections for consumers remain unaffected.

18. Severability, entire agreement, contact

18.1 If any provision of these Terms is or becomes invalid or unenforceable, the remaining provisions continue in force. The invalid provision shall be replaced by a valid provision that comes closest to the economic purpose of the original, to the extent permitted by law.

18.2 These Terms, together with the Privacy Policy, any applicable AVV/DPA, the Plan details shown on the pricing page / Panel, the Service / SLA page (where applicable), and any express Custom order, constitute the entire agreement between you and Templass regarding the Service and supersede prior non-written side agreements on the same subject. Individual Custom orders prevail where they expressly conflict.

18.3 No failure or delay in enforcing a provision is a waiver of that provision.

18.4 Contact: [email protected] · Discord: https://discord.com/invite/av38fYfdtc · Provider details: Imprint · Privacy: Privacy Policy