Privacy

Privacy Policy

Last updated 26 July 2026

Your DNS history is a record of nearly everywhere you go online. This page explains what dundns does and doesn't do with that record. Contact details are at the end.

  1. We never sell or share your data.

    We do not sell, rent, or hand your data to anyone, and never will. dundns is paid for by Pro and Business subscriptions, not by advertising or analytics deals. Your data is used only to run the service you signed up for.

  2. Queries we don't keep are forgotten immediately.

    The resolver holds a query in memory only for the moment it takes to answer it. Nothing is written to disk unless you have logging enabled, as described next.

  3. Logging is off until you switch it on.

    A new profile logs nothing. Turn logging on and we keep what the dashboard, analytics, and per-device logs need: the domain, the source device or address, the time, whether the query was blocked and by which rule or list, and whether it was validated with DNSSEC. All of it stays under your control:

    • Switch logging back off per profile at any time, in one click, in the same place you turned it on.
    • Stop storing source IP addresses, queried domains, or both.
    • Choose retention from one hour to three months; older logs are deleted automatically.
    • View, filter, export to CSV, and delete your logs at any time.

    What you see in your dashboard is everything we hold about your DNS activity.

Information we collect

  • Your account. An email address, a password (stored as a salted hash), your plan and subscription status, and your profiles: names, rules, enabled blocklists, and any linked IP address.
  • Your DNS activity. The query logs described in commitment 3, only if you switched logging on, and then only what your settings allow.
  • A query count. A running tally used to apply your plan's allowance, described below.
  • Operational basics. The IP address a request arrives from is used to match it to your profile, and stored only if IP logging is enabled.

Why we are allowed to hold it

The GDPR calls this the legal basis for processing.

What Why Legal basis
Your account Sign you in and run your subscription. Contract, Art 6(1)(b)
Profiles and rules Filter your DNS the way you set it up. Contract, Art 6(1)(b)
Query logs Show your dashboard, analytics, and per-device logs. Off until you turn them on, and off again the moment you say so. Consent, Art 6(1)(a)
Query count Apply your plan's allowance. Contract, Art 6(1)(b)
Billing records Tax and accounting. Legal obligation, Art 6(1)(c)
Sign-in and email limits Keep accounts and inboxes safe from abuse. Legitimate interests, Art 6(1)(f)

Where we rely on consent, you give it by switching a setting on, and you withdraw it by switching that same setting off. Nothing here depends on a cookie banner or a pop-up you have to dismiss.

Counting queries for your plan

The Free plan has a monthly query allowance, so we keep a per-account count of resolved queries. It is a number only, with no domains or addresses, and it exists whether or not logging is enabled.

Payments

Subscriptions are handled by Paddle, our merchant of record. Payment details are entered with and processed by Paddle; we never see your card number. Paddle shares back only what we need to manage your subscription, such as status and renewal date, under its own privacy policy.

Email

We send transactional email only (address verification, password resets, account and billing notices) from noreply@tem.dundns.eu, via our provider Scaleway. No marketing email without your consent.

Cookies and tracking

dundns sets two essential first-party cookies: one keeps you signed in, one protects forms against cross-site request forgery. There are no advertising, analytics, or tracking cookies. Fonts, stylesheets, scripts, and the domain icons in your dashboard are all served from our own servers, so loading dundns contacts no one else. The one third-party script is Paddle's checkout, loaded only on the billing page.

How your data is protected

DNS traffic can reach us encrypted (DNS-over-HTTPS, DNS-over-TLS, or DNS-over-QUIC) and the dashboard is served only over HTTPS. With Oblivious DoH, queries reach us through a relay that keeps your IP address from us entirely. Passwords are stored as salted hashes, and access to stored data is limited to what operating the service requires.

Your rights

From your dashboard you can review and export your logs, and delete your logs or your entire account; deleting the account erases your profiles, settings, and logs. You can withdraw your consent to logging at any time by switching it off, which is as easy as switching it on was, and stops new logs immediately. Under the GDPR, UK GDPR, or similar laws you also have the rights to access, rectify, erase, restrict, and port your data, and to object to its processing. The CSV export is your portable copy; for anything else, contact us below.

Data retention

Query logs are deleted automatically after your chosen retention period. Account data is removed when you close your account, except limited billing records we must keep by law.

Children

dundns is not directed at children under 16, and we do not knowingly collect their data.

Changes to this policy

Changes are posted here with an updated date. Significant changes are announced through the service.

Contact

dundns is operated by DUNDNS LIMITED, a company registered in the Republic of Ireland (company number 818115), the data controller for your information.

DUNDNS LIMITED
Nesta Storage, Deansgrange Business Park
Office Number 100
Blackrock, Co. Dublin
A94 A4A6
Republic of Ireland

Email support@dundns.eu.