diff --git a/README.md b/README.md
index 0a45474..5d4cbe5 100644
--- a/README.md
+++ b/README.md
@@ -7,3 +7,7 @@ Since the proxy listens only on a local address, unencrypted DNS is not a concer
 ### Example Flow
 
 [https://doh.archuser.org/dns-query](https://doh.archuser.org/dns-query) *(encrypted: HTTPS protocol)* → **secure-dns-proxy** *(unencrypted: standard DNS protocol)* → `127.0.0.35:53`
+
+# LEGAL
+
+This project is licensed under the AGPL version 3. Note the license terms, which are summarized at [https://choosealicense.com/licenses/agpl-3.0/](choosealicense.com).