Terms of Service

Conditions for using the hosted DNS service at lancert.dev.

Last updated: 26 October 2026

What the service provides

Lancert provides public DNS hostnames that resolve to private IPv4 or IPv6 addresses, along with authenticated DNS-01 challenge updates. The hosted service is free to use.

Your ACME client requests and renews certificates with your chosen certificate authority. The hosted Lancert service does not request, renew, store, or distribute certificates or private keys. You are responsible for configuring your client, monitoring renewal, and meeting your certificate authority’s requirements.

Availability and changes

The service is provided on a best-effort basis, without a service-level agreement or a guarantee of uninterrupted availability. DNS resolution, registration, and challenge updates may be interrupted by maintenance, faults, or abuse prevention measures.

Features, limits, and availability may change, and the service may be discontinued. A registration does not guarantee permanent access to a hostname. If your application depends on Lancert, plan for DNS or certificate renewal failures and a way to move to another service.

Acceptable use

Use Lancert only for lawful purposes and for systems you own or are authorized to administer.

• Do not use the service for phishing, malware, fraud, or other abusive activity.
• Do not attempt to access another user’s credentials or modify their registrations.
• Do not bypass rate limits, create excessive registrations, or deliberately disrupt the service.

Credentials and public DNS

Keep your API credentials secure. They authorize DNS challenge updates for your assigned hostname and can be used to prove control of it to a certificate authority. Store the one-time registration response safely: the service cannot recover the plaintext API key. If credentials are lost, create a new registration; if they are exposed, report the affected hostname so it can be disabled.

Registered hostnames, their target private IP addresses, and active challenge TXT values are publicly resolvable. Certificates from public certificate authorities may also appear in public Certificate Transparency logs. Do not use these records to store secrets.

Abuse reports and disabling registrations

Registrations may be disabled to address abuse, security risks, or violations of these terms. Disabling a registration stops its DNS answers and rejects further challenge updates. This can prevent certificate issuance or renewal; it does not revoke certificates already issued by a certificate authority.

Report suspected abuse or exposed credentials to abuse@lancert.dev. Include the affected hostname and relevant details, but never send API keys or private keys.

Privacy and third parties

The Privacy page explains service data, public statistics, and cookie-free website analytics. Your certificate authority, ACME client, and other external services have their own terms and privacy practices.

Software license and warranties

The Lancert source code is available under the MIT license. These terms describe the hosted service; the software license governs use, modification, and distribution of the code.

To the extent permitted by applicable law, the hosted service is provided “as is” and “as available”, without warranties of availability or fitness for a particular purpose. Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limits rights that applicable law does not allow you to waive.

Questions and updates

For general questions, use the project’s GitHub repository. Do not post credentials or other sensitive information in public issues. Updates to these terms will be published on this page with a revised date.