This policy explains what the Service collects, why, and your choices. Review with counsel before launch.
What we collect
- Account data: email address, name, password hash (never the password itself), MFA settings.
- Service data: the hostnames you claim and the DNS records you create, which are public by nature of DNS.
- Security and usage data: IP address and user agent of sessions, API request counts, and an audit log of changes.
Why
- To provide the Service, enforce plan limits and secure accounts.
- To investigate abuse and comply with legal obligations.
- To send transactional email such as verification, password reset and security notices.
Retention
Usage history is kept for the period of your plan’s activity history. Audit logs are retained for security purposes. When you delete your account, personal data is removed or anonymised, except where retention is legally required.
Sharing
DNS records are published to the authoritative DNS provider and are publicly resolvable. We use processors for hosting, email delivery and error monitoring under contracts that protect your data. We do not sell personal data.
Security
Passwords are hashed with Argon2id, API keys are stored as hashes, and provider credentials are encrypted at rest. Sessions use secure, HTTP-only cookies.
Your rights
Depending on where you live you may access, correct, export or delete your data. Use Settings or contact us through the contact page.