Secondary DNS Hosting - Terms of Service

Last updated: January 14, 2026

These terms govern your use of le_dns Secondary DNS Hosting service. By registering or using the service, you agree to these terms. For the public resolver service, see Resolver Terms.

1. Service Description

le_dns provides secondary DNS hosting (slave zones) with the following features:

• Multi-geographic nameservers: ns1.ledns.eu (51.83.90.178) and ns2.ledns.eu (51.89.103.206)
• TSIG-authenticated zone transfers: HMAC-SHA256 secure authentication
• Automatic zone updates: Receives NOTIFY from your primary DNS and pulls updates via AXFR/IXFR
• Web UI + REST API: Manage zones via web interface or programmatic API
• Domain verification: TXT record verification ensures domain ownership

Service Level

The service is provided on a best-effort basis with no formal SLA. We target:

• 99.5% availability per nameserver
• 99.9% aggregate availability

Note: These are targets, not contractual guarantees. This is currently a free service (may introduce paid SLA tiers in the future).

2. Customer Obligations

As a customer, you must:

• Maintain a functional primary DNS server that responds to zone transfer requests
• Update zone serials when making changes (we rely on SOA serial increments)
• Secure TSIG keys: Keep your TSIG secret confidential (we hash API keys but you must protect TSIG secrets)
• Respond to abuse complaints within 48 hours (sent to your registered email)
• Comply with laws: No illegal content (phishing, malware, CSAM, copyright infringement, etc.)
• Configure correct NS records: Your domain's NS records must point to ns1.ledns.eu and ns2.ledns.eu

3. Domain Verification

Before TSIG credentials are revealed, you must verify domain ownership:

• Add a TXT record at _ledns-verify.yourdomain.com with the provided token
• Click "Verify" in the web UI or call the API verification endpoint
• We query authoritative DNS to confirm the TXT record exists
• Once verified, TSIG credentials become visible and zone transfers are enabled

Why? Prevents unauthorized users from registering domains they don't own.

4. TSIG Key Management

• Key format: customer-[uuid].[domain] with HMAC-SHA256 algorithm
• Key security: You are responsible for securing your TSIG secret (treat it like a password)
• Key rotation: Contact support@ledns.eu to rotate keys
• Lost keys: If lost, delete the zone and re-register (generates new credentials)

5. Zone Limits & Quotas

• Default limit: 100 zones per customer account
• Records per zone: No hard limit (reasonable use expected)
• Zone size: No hard limit, but extremely large zones (>10MB) may require review
• Quota increases: Contact support@ledns.eu for increases

6. Data Processing & GDPR

For Secondary DNS hosting:

• Your role: Data Controller (you own the domain data)
• Our role: Data Processor (we host and serve your zones on your behalf)
• Data Processing Agreement (DPA): See Data Processing Agreement for GDPR Article 28 compliance
• Privacy Policy: See Privacy Policy for details on how we handle account data

Data we process: Email address, domain names, primary DNS IP, TSIG keys, zone data (DNS records).

7. Service Suspension & Termination

7.1. Suspension by Us

We may suspend or terminate zones immediately if:

• Illegal content detected: Phishing, malware, CSAM, copyright infringement, etc.
• Abuse complaints received and not resolved within 48 hours
• Terms violations: Failure to maintain primary DNS, non-responsive to contact
• Legal requirements: Court orders or government requests

7.2. Termination by You

You may delete zones at any time via web UI or API. Deleted zones are:

• Moved to archive for 30 days (recovery window)
• Permanently deleted after 30 days
• TSIG keys invalidated immediately upon deletion

7.3. Non-Abuse Suspensions

For non-abuse reasons (e.g., service discontinuation), we will provide 7 days notice via email.

8. Fees & Pricing

The service is currently free of charge. We reserve the right to:

• Introduce paid tiers in the future (with SLA guarantees)
• Provide 30 days notice before any pricing changes
• Grandfather existing free users or offer migration paths

If pricing is introduced, you'll have the option to accept or migrate to another provider.

9. Support

• Email support: support@ledns.eu
• Response time: Best effort, typically <48 hours
• Emergency contact: abuse@ledns.eu for critical abuse issues

Support is provided in English and French.

10. Warranties & Liability

Service is provided "as is" without warranties. We are not liable for:

• Service interruptions or downtime
• DNS resolution failures
• Data loss (backup your primary DNS!)
• Indirect, consequential, or incidental damages
• Loss of business or revenue due to service issues

Your responsibility: Maintain backups of your zone files. We are secondary DNS only—you must maintain your primary.

11. Acceptable Use

You may NOT use the service for:

• Phishing, malware distribution, or CSAM hosting
• Copyright infringement or piracy
• Spam or unsolicited bulk email infrastructure
• DDoS command-and-control domains
• Any illegal activity under French or EU law

12. Changes to Terms

We may update these terms at any time. Changes effective immediately upon posting. We will notify registered users via email for material changes.

13. Governing Law

These terms are governed by French law. Disputes subject to exclusive jurisdiction of French courts.

14. Contact

• Support: support@ledns.eu
• Legal: legal@ledns.eu
• DPA questions: legal@ledns.eu