Terms of Service

Last updated: 8 September 2026

1. Scope

These terms govern the use of the hiddenprimary.ch DNS hosting service ("Service") operated by Piremus Cross LLC, 1209 Mountain Road Pl NE STE N, Albuquerque, NM 87110, USA ("Operator"). By creating an account, you ("Customer") agree to these terms.

2. Service Description

The Service mirrors DNS zones from a customer-designated hidden primary server via AXFR/IXFR, optionally signs them with DNSSEC, and serves them through the Operator's nameserver infrastructure. The Service includes a web portal, REST API, and Terraform provider for zone management.

3. Account

  • You must provide a valid e-mail address and keep your credentials confidential.
  • You are responsible for all activity under your account, including API key usage.
  • One person or entity per account. Shared accounts are not permitted.

4. Acceptable Use

You agree not to use the Service to:

  • Host zones for domains involved in illegal activities.
  • Conduct DNS amplification attacks or other forms of abuse.
  • Circumvent rate limits or abuse the API.
  • Resell the Service without written agreement.

5. Availability

The Operator targets 99.99% uptime for DNS resolution. This excludes scheduled maintenance (announced at least 48 hours in advance) and force majeure events. The Service is provided "as is" without warranty of uninterrupted or error-free operation.

6. Pricing and Payment

  • Prices are listed in Swiss Francs (CHF) and may be billed monthly or yearly.
  • A 14-day free trial is available for new accounts; no payment information is required to start it. To continue using the Service after the trial, the Customer must select a paid plan.
  • Each plan includes a set number of zones. Zones beyond that number are billed per additional zone at the plan's published extra-zone rate — per month on a monthly subscription, per year on a yearly one.
  • Payments are processed through Stripe. The Operator does not store credit card data.
  • The Operator reserves the right to adjust prices with 30 days' notice.

7. Trial Expiry, Cancellation, and Zone Removal

  • You may cancel your subscription at any time via the billing page. Paid access continues until the end of the current billing period.
  • When a free trial expires without a paid plan, or a subscription ends or a payment cannot be collected, the affected zones enter a read-only grace period: they continue resolving from the last transferred data but no longer pull updates from the hidden primary. Zones signed by us (inline DNSSEC) are an exception: freezing also stops re-signing, so their signatures expire during the grace period and validating resolvers will start to fail well before it ends. Renew before that point, or remove the DS record at your registrar to keep the zone resolving unsigned.
  • After the grace period (approximately 45 days) the zones are removed from the nameservers. The zone configuration is retained so the Customer can resume at any time by selecting a paid plan.
  • The Operator may suspend or terminate accounts that violate these terms with immediate effect.

8. Data and Privacy

The Operator processes personal data in accordance with the Privacy Policy and Swiss data protection law (nDSG). Zone data remains the Customer's property.

9. Liability

  • The Operator's liability is limited to the fees paid by the Customer in the preceding 12 months.
  • The Operator is not liable for damages resulting from DNS misconfigurations by the Customer, unavailability of the Customer's hidden primary, or force majeure.

10. Governing Law

These terms are governed by Swiss law. The exclusive place of jurisdiction is St. Gallen, Switzerland.

11. Changes

The Operator may update these terms with 30 days' notice via e-mail. Continued use after the notice period constitutes acceptance of the updated terms.