Terms of service
This page says what the service does, what it deliberately does not do, and how you leave. It is not a finished contract yet, and it says so in the first section rather than burying it in the last.
What is not settled yet
Read this before the rest of the page
The commercial terms of this service are not settled yet, and this page does not pretend otherwise.
Missing on purpose, left blank rather than filled with wording that would read well: prices and billing, refunds, service levels and response times, warranties, limitation of liability, dispute resolution and governing law.
One item that used to sit in that list has an answer now, and the answer is not a company name. Who runs this, and what that means for you, is set out directly below.
Everything else here describes how the service already behaves, so you can check it against what it does. When the terms above are decided, they will appear on this page, dated, before they apply to anyone.
Nothing is charged today, and there is no way for it to be. The service is being brought to market: it is open, it is in use, and the commercial side of it has not been built. There is no payment system connected to this website, no card is stored, and no action available to you here creates a charge.
That is a description of today, not a promise about every day after it. What we do promise is the order things happen in: a price appears on the pricing page, dated, before anyone is asked to pay it, and using the service now does not put you under a bill later without you agreeing to one first.
Who runs this
There is no company behind this yet. OneLineShield is built and operated by one person, working from Singapore. It is not an incorporated business, so there is no registered entity for you to contract with, and that is the reason the commercial terms above are blank rather than drafted.
Saying that plainly is the point. A service that holds a piece of your DNS should not be vague about who is holding it, and a page that listed a registered address without a registered company would be telling you something that is not true.
The way to reach a human about anything on this page, including problems with your own hostname, is support@onelineshield.com. There is no support desk behind it and no promised response time, because promising one before it exists is how the rest of this page would stop being trustworthy.
When a company is registered, its name, registration number and registered address appear here, dated, before anyone is asked to contract with it.
What the service does
In one sentence: it puts your website behind Cloudflare without moving your nameservers, then keeps checking that it stayed there. That takes two DNS records, and the paragraph below says what each one is for.
We register your hostname with Cloudflare and give you two DNS records to add. One is a CNAME that sends your hostname to our gateway. The other lets Cloudflare renew your certificate on its own, for as long as you stay. Both records live in your DNS, under your control, and you can read them at any time.
After that, the work is measurement. On a schedule we ask: does Cloudflare still report this hostname as active, when does the certificate expire, are both DNS records still in place, does the site still answer through Cloudflare, and does your own server answer directly to anyone on the internet who asks it.
We report those answers and when we measured them. We do not change anything on your server, and we could not: setting this up gives us no access to it.
What the service does not do
Four limits worth knowing before you decide, rather than after.
- It is not a stronger firewall
- Your website sits behind the same Cloudflare protection either way, at the same strength. Firewall rules that apply to a single hostname are an Enterprise feature at Cloudflare, so every site here shares one configuration at the zone level. No plan sold here can make that wall stronger, and none will claim to.
- It is not hosting, and not a proxy of ours
- We do not host your website, and your visitors do not travel through our servers. Each hostname points at its own origin, which is your own server, and Cloudflare talks to it directly.
- It does not take over your DNS
- Your nameservers stay where they are. We do not manage your zone, and the only records involved are ones you added yourself and can remove yourself.
- It does not watch continuously
- Checks run on a schedule, so there is always a gap between something breaking and us seeing it. When a check cannot measure something, it says so. A result of "not determined" never quietly becomes "fine".
As is, and what that means
The service is provided as is, with no warranty of uninterrupted availability.
That line sits in the footer of every page. Here is what it means in practice. Cloudflare can have an outage. Your DNS provider can have one. This service can have one.
The checks can also be wrong, and they are wrong in one particular direction: they can fail to notice a problem. They measure from the outside, at intervals, using public data. A green result means the last measurement found nothing wrong at that moment. It is evidence, not a guarantee.
Your server stays yours to run and to secure. What this service adds is a second pair of eyes reporting what can be seen from outside.
Leaving
Leaving is a DNS change you make yourself, not a support request.
Your nameservers never moved, so your domain never depended on us for anything except one record. Point that record back at your own server and your website serves from where it always did.
On our side, removal is deliberately slow, and that is a protection rather than a delaying tactic. The code that deletes a custom hostname refuses to run until a grace period of at least seven days has passed and at least two notices have been sent. Deleting it while your DNS still points at the gateway is the one action that would actually take your website down.
We do not hold your domain, your certificate, or the content of your site. What we do hold is a short list of records about it.
Written on . This date moves by hand, only when the wording above changes.