Terms of Service

The terms that govern your use of XDP.NETWORK's DDoS protection and managed WAF services, accounts, licenses, and subscriptions.

Last updated Effective v1.0
On this page

These Terms of Service (the "Terms") govern your access to and use of the protection products, dashboard, and APIs of XDP.NETWORK, [[PLACEHOLDER: company legal name]], a PingLess Studios product ("we", "us", "our") — collectively, the "Services". They form a binding contract between XDP.NETWORK and the person or entity that registers an account (the "Customer", "you", "your").

These Terms incorporate the Acceptable Use Policy, Privacy Policy, Refund, Cancellation & Chargeback Policy, Service Level Agreement, Data Processing Addendum, and Cookie Policy, each of which forms part of this agreement.

1. Acceptance & eligibility

A contract is formed the moment you first use the Services — by creating an account, purchasing a license or subscription, installing our firewall agent, or pointing your DNS at our edge. If you do not agree to these Terms, do not use the Services.

You may use the Services only if you are at least 18 years old and capable of forming a binding contract. The Services are offered for business and professional use, for servers, game servers, sites, and APIs you own or are authorized to administer.

If you use the Services on behalf of an organization, you represent that you have authority to bind it to these Terms, and "Customer" refers to that organization.

2. Account registration & security

You must register an account to use the Services, providing accurate, current, and complete information (including your name and email address), and keep it up to date.

You are responsible for the confidentiality of your credentials and for all activity under your account, whether or not you authorized it. Do not share your password or API keys with third parties.

Notify us promptly at [[PLACEHOLDER: support email]] if you become aware of any unauthorized use of your account or any other breach of security. We recommend (but do not require) enabling two-factor authentication on your account where available.

3. Description of the Services

3.1. The Agent

OpenShield-XDP (the "Agent") is an eBPF/XDP firewall agent installed on your own Linux servers that drops L3/L4 attack traffic in the kernel driver path. The Game and Game Pro editions tune the same pipeline for UDP game and voice traffic — per-player rate limits and query/RCON shielding; Game Pro adds engine presets, multi-instance support, priority signature pushes, and up to 5 instances per license.

The Agent runs on your infrastructure under your control; you are responsible for installing, updating, and configuring it and for the servers it runs on.

3.2. The managed WAF

PingLess WAF and WAF Pro are managed edge web application firewall services. No agent is installed on your servers: a DNS change routes your traffic through our edge, filtering it before it reaches your origin. WAF Pro adds unlimited origins, per-route rate shaping, API schema protection, custom rulesets, and a mitigation SLA described in the Service Level Agreement.

3.3. The Console and APIs

The "Console" is the XDP.NETWORK dashboard for managing your account, enrolling servers, and reviewing telemetry. Each server connects with a per-server metrics API URL and API key (osk_…), stored server-side; the Console polls the Agent's metrics API for live traffic, attack records, bans, and geo data. Our APIs let you automate these operations.

3.4. An honest limitation

No security service can guarantee prevention of every attack, and ours is no exception. The Services substantially reduce exposure to DDoS and application-layer attacks, but we do not warrant that they will detect, mitigate, or block all malicious traffic, or that your infrastructure will always be available. Maintain your own backups, redundancy, and incident-response plans.

4. Plans, tiers & modifications

  • One-time licenses. OpenShield-XDP Game and Game Pro licenses are one-time purchases with lifetime updates for the licensed edition. Per-plan limits apply: Game covers one server per license; Game Pro up to 5 instances per license.
  • Monthly subscriptions. PingLess WAF and WAF Pro are billed monthly, with the features and limits described on the pricing page at [[PLACEHOLDER: price / plan details URL]].

Current prices are listed at [[PLACEHOLDER: price …]].

We may modify the Services from time to time. If a change materially reduces a plan you have purchased, we will notify you by email or through the Console with reasonable advance notice; your remedies are described in the Refund, Cancellation & Chargeback Policy.

5. Payment terms

Prices are quoted in [[PLACEHOLDER: currency]] and exclude taxes; you are responsible for all applicable taxes and similar charges, except taxes on our net income.

  • Billing cycles. Subscriptions are billed monthly in advance from the date you subscribe. One-time licenses are charged in full at purchase.
  • Auto-renewal. Subscriptions renew automatically at the end of each billing cycle unless you cancel through the Console before renewal; by subscribing you authorize us to charge your payment method on file for each renewal.
  • Price changes. We may change subscription prices. A change takes effect no earlier than 30 days after we notify you by email or through the Console, applying to your next renewal; if you do not accept it, cancel before it takes effect.
  • Non-payment. If a charge fails or an amount remains unpaid, we may retry the charge, suspend the affected Services, and ultimately terminate your account, as described below. Refunds, cancellations, and chargebacks are governed by the Refund, Cancellation & Chargeback Policy.

6. Trials & beta features

We may offer trials, previews, or beta features from time to time. They are provided as available, may contain bugs or incomplete functionality, and may be changed or discontinued at any time without notice. No SLA (including the Service Level Agreement) or support commitment applies to them, and we are not liable for harm arising from their use.

7. Customer responsibilities

You are responsible for how you use the Services. You agree to:

  • use the Services only to protect servers, game servers, sites, and APIs you own or are authorized to protect (your "Protected Infrastructure");
  • use the Services lawfully, in compliance with all laws applicable to you and to what you operate on your Protected Infrastructure;
  • comply with the Acceptable Use Policy, which is part of these Terms;
  • keep the contact email on your account current so legal, security, and billing notices reach you; and
  • have the rights and consents needed for us to process your Protected Infrastructure's network traffic metadata (source IPs, packet rates, attack signatures), as described in the Privacy Policy and Data Processing Addendum.

8. API usage

API access requires API keys; per-server keys (prefixed osk_) are issued when you connect a server to the Console. Keys are secrets: keep them confidential and never embed them in client-side code or public repositories. You are responsible for all activity performed with your keys.

The APIs are subject to rate limits described in the Console or API documentation. Do not exceed or circumvent these limits or interfere with the APIs' operation; we may throttle or restrict clients that generate abusive request volumes.

You must not resell, sublicense, or provide access to the Services or the APIs to any third party except under a separate written agreement with us.

9. Intellectual property

We own all right, title, and interest in the Services — including the Agent, Console, and APIs, the underlying software, signatures, rulesets, and documentation, and the XDP.NETWORK, OpenShield-XDP, PingLess, and PingLess Studios brands. These Terms transfer none of those rights to you.

You own your data and the content, configurations, and materials you submit to the Services ("Content"); these Terms transfer none of it to us. You grant us a limited license to host, process, and transmit your Content only as needed to provide and improve the Services.

We grant you a limited, non-exclusive, non-transferable, revocable license to install and use the Agent on your own servers, and to access the Console and APIs, solely while your license or subscription is active and solely to protect your own Protected Infrastructure. You must not copy, modify, reverse engineer, or create derivative works of the Agent, except where such a restriction is prohibited by law.

If you choose to send us feedback or suggestions about the Services, you grant us a non-exclusive, perpetual, royalty-free license to use them without restriction or obligation to you.

10. Confidentiality

Each party may receive non-public information from the other that is designated confidential or that should reasonably be understood to be confidential ("Confidential Information"). Ours includes unpublished mitigation techniques, signatures, and infrastructure details; yours includes your non-public configurations and Content.

Each party will protect the other's Confidential Information with at least reasonable care, use it only to perform under or benefit from these Terms, and not disclose it to third parties except to personnel, affiliates, and advisors bound by equivalent obligations.

These obligations do not apply to information that: (a) is or becomes public through no breach of this section; (b) was already known to the receiving party; (c) is received from a third party without breach of any obligation; or (d) is independently developed without using it. A party may disclose Confidential Information where required by law or court order, with reasonable prior notice to the other party where legally permitted.

11. Third-party services

The Services interoperate with third-party infrastructure we do not control — including your hosting provider, DNS provider, game server platform, and our payment processor, [[PLACEHOLDER: payment processor]]. Your use of those services is governed by their own terms.

We are not responsible for the availability, security, or acts or omissions of third-party services, or for failures or damage arising from systems outside our reasonable control. Payment details are processed by [[PLACEHOLDER: payment processor]] under its terms; we do not store your full payment credentials.

12. Suspension & termination

We may suspend or limit your access to the Services, in whole or in part, if: (a) you breach these Terms or the Acceptable Use Policy; (b) an amount due remains unpaid; (c) your use creates a security risk to us or other customers; or (d) the law requires it. Where practicable we will give you notice and an opportunity to cure first; where immediate action is needed (for example, ongoing abuse involving your account), we may act first and notify you promptly afterward.

You may terminate your account at any time through the Console, and you may cancel a subscription as described in the Refund, Cancellation & Chargeback Policy. We may terminate this agreement for convenience with reasonable notice, or immediately for a material breach you fail to cure after notice.

After termination you will have [[PLACEHOLDER: e.g. 30 days]] to retrieve exportable data from the Console; afterward we may delete it in line with the Privacy Policy. On termination, your access to the Console, APIs, and managed WAF ends immediately, and your license to use the Agent ends — except that one-time licenses retain the rights described in their license terms unless termination was for your material breach. Sections that by their nature should survive (payment, intellectual property, confidentiality, disclaimers, limitation of liability, indemnification, governing law) survive termination.

13. Disclaimers

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS. EXCEPT AS EXPRESSLY SET OUT IN THESE TERMS AND THE Service Level Agreement, AND TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT, AND ANY WARRANTY THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR WILL BLOCK EVERY ATTACK.

We make no uptime or performance commitment beyond the Service Level Agreement, whose remedies are your exclusive remedies for the service levels it covers. Where a jurisdiction does not allow certain warranty exclusions, this section applies only to the extent permitted.

14. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL XDP.NETWORK, ITS AFFILIATES, OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION, ARISING OUT OF OR IN CONNECTION WITH THE SERVICES OR THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, OUR AGGREGATE LIABILITY ARISING OUT OF OR IN CONNECTION WITH THE SERVICES OR THESE TERMS WILL NOT EXCEED THE TOTAL FEES YOU PAID OR WERE PAYABLE TO US FOR THE SERVICES IN THE TWELVE (12) MONTHS IMMEDIATELY BEFORE THE EVENT GIVING RISE TO THE CLAIM.

These limits apply in aggregate, whatever the legal theory. Nothing in these Terms excludes or limits liability that cannot be excluded by law — including for fraud, willful misconduct, or death or personal injury caused by negligence — and where an exclusion is not permitted, our liability is limited to the fullest extent the law allows.

15. Indemnification

You agree to indemnify, defend, and hold harmless XDP.NETWORK, its affiliates, and their officers, employees, and agents from any third-party claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of: (a) your unlawful use of the Services; (b) your Content or anything you operate on your Protected Infrastructure; or (c) your violation of these Terms or the Acceptable Use Policy.

We will notify you promptly of any covered claim, cooperate reasonably at your expense, and let you control the defense, provided you do not settle in a way that imposes obligations on us without our prior written consent.

16. Governing law & disputes

These Terms and any dispute arising out of or in connection with them or the Services are governed by the laws of [[PLACEHOLDER: governing law jurisdiction]], without regard to its conflict-of-laws rules.

Before filing a formal claim, the parties will try to resolve the dispute informally: send the other party a written description, and both parties will attempt in good faith to resolve it within 30 days of that notice.

If it is not resolved in that period, the parties submit to the exclusive jurisdiction of the courts of [[PLACEHOLDER: venue]] and waive any objection to that venue; either party may still seek urgent injunctive or equitable relief to protect its intellectual property or Confidential Information.

17. Changes to these terms

We may update these Terms from time to time. For material changes, we will notify you by email or through the Console at least 14 days before they take effect, describing what changed.

Continued use of the Services after a change takes effect means you accept the updated Terms. If you do not agree, stop using the Services and close your account before that date; refunds, if any, follow the Refund, Cancellation & Chargeback Policy. A version history appears at the bottom of this page.

18. General

  • Severability. If any provision is held invalid or unenforceable, it will be enforced to the maximum extent permissible and the rest stays in full force.
  • No waiver. A failure or delay by either party to enforce a right or provision is not a waiver of it.
  • Assignment. You may not assign or transfer these Terms or your account without our prior written consent. We may assign these Terms to an affiliate or to a successor in a merger, acquisition, or sale of assets, with notice to you.
  • Entire agreement. These Terms, with the policies referenced above, are the entire agreement between you and us about the Services, superseding any prior agreements on the same subject.
  • Force majeure. Neither party is liable for delays or failures caused by events beyond its reasonable control — natural disasters, war, terrorism, labor disputes, utility or backbone network failures, large-scale attacks on upstream infrastructure — provided it uses reasonable efforts to mitigate.

19. Contact

Questions about these Terms may be sent to our legal contact at [[PLACEHOLDER: legal contact email]], or by post to [[PLACEHOLDER: company legal name]], [[PLACEHOLDER: registered address]].

DateChange
Initial publication.