Privacy Policy

1. Data controller

2. Categories of personal data

• Account data — organisation or personal name, e-mail address, hashed password (none if you only sign in with Google or Facebook), and the date and time you accepted the Terms of Service.
• Google sign-in (optional) — if you choose “Continue with Google”, we receive from Google and store your Google account identifier, the e-mail address of that account and its display name, so we can recognise you on your next sign-in. We do not receive your Google password and we request no access to your Google data beyond these three fields.
• Facebook sign-in (optional) — if you choose “Continue with Facebook”, we receive from Meta and store the app-scoped user identifier Facebook assigns to you for dnsdome, the e-mail address of your Facebook account (if it has one and you share it) and your display name, so we can recognise you on your next sign-in. We request only the public_profile and email permissions, we do not receive your Facebook password, and we never post to or read anything else from your Facebook account. If your Facebook account shares no e-mail address, we ask you for one and confirm it by e-mail before the account is created.
• DNS query logs — queried domain, filtering verdict, client source IP address, profile and timestamp. These are personal data.
• Billing data (company accounts) — legal company name, VAT ID, billing address including country, and optionally IČO and DIČ. Payment cards are processed by Stripe (see section 4); we store only the card brand, its last four digits and a payment token, never the card number.
• Support communications — the content of support tickets and related e-mail correspondence.
• Security logs — an audit trail of account actions (e.g. sign-in attempts) including IP address and browser user-agent.

3. Purposes and legal bases

• Providing and billing the service. Art. 6(1)(b) contract
• Security and abuse prevention. Art. 6(1)(f) legitimate interests
• Legal obligations such as accounting. Art. 6(1)(c) legal obligation
• Measuring the effectiveness of our advertising (Meta Pixel, see section 10). Art. 6(1)(a) consent

4. Recipients and processors

The service is hosted on our own infrastructure in the EU. We do not sell personal data. We use the following processors:

• Stripe Payments Europe, Ltd. — card payments and stored payment methods.
• Cloudflare, Inc. — the Turnstile CAPTCHA on the sign-up form, which processes your IP address and browser signals to distinguish humans from bots.
• SMTP2GO — delivery of transactional e-mail (verification, invoices, support replies).
• Google Ireland Ltd. — this website loads its fonts from Google Fonts, which discloses your IP address to Google when the page renders. If you use “Continue with Google”, Google also acts as your sign-in provider: Google learns that you signed in to dnsdome and tells us your account identifier, e-mail address and display name (see section 2). For that sign-in Google is an independent controller under its own privacy policy.

With your consent only, we also share data with Meta Platforms Ireland Ltd. for measuring our advertising via the Meta Pixel. For this purpose Meta is not our processor but a joint controller with us (see section 10).

If you use “Continue with Facebook”, Meta Platforms Ireland Ltd. also acts as your sign-in provider: Meta learns that you signed in to dnsdome and tells us your app-scoped user identifier, e-mail address and display name (see section 2). For that sign-in Meta is neither our processor nor a joint controller with us but an independent controller under its own privacy policy, and it does not depend on your Pixel consent.

5. International transfers

Data is processed in the EU. Where a processor transfers data outside the EEA, it is under appropriate safeguards (Standard Contractual Clauses). Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework.

6. Retention and account lifecycle

DNS query logs are kept per plan, then deleted: Free 1 day, Home 30 days, Pro 90 days, Business 365 days. Account data is kept while the account is active and as required by law (e.g. accounting).

• Unverified accounts — an account whose e-mail address is never verified is deleted 30 days after registration.
• Dormant accounts — an account without an active paid subscription that has sent no DNS queries for 30 days is marked dormant; if it stays dormant for a further 180 days it is deleted together with its data. The mark is removed automatically when activity resumes.
• On deletion (self-service or lifecycle) all configuration, query logs and statistics are erased. Unpaid invoices are retained with the associated billing identity for as long as accounting law and the assertion of legal claims require.

7. Your rights

You have the right to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may lodge a complaint with the Czech supervisory authority Úřad pro ochranu osobních údajů (Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz) or the authority in your EU member state. Exercise your rights via info@dnsdome.com.

8. Whether provision is required

Account data and source-IP data are necessary to provide the service; without them the service cannot be provided.

9. Automated decision-making

None. We carry out no automated decision-making or profiling with legal or similarly significant effects.

10. Cookies and advertising measurement

The customer panel sets a single strictly necessary session cookie (dnsdome_session) used solely to keep you signed in.

On dnsdome.com and on the sign-up and billing pages of the customer panel we additionally use the Meta Pixel (Meta Platforms Ireland Ltd.) to measure whether our advertising on Facebook and Instagram leads to sign-ups and purchases — only if you consent in the cookie banner. With your consent the pixel sets the _fbp cookie (90 days) and sends Meta the page visited, your IP address, browser information, the Facebook click identifier if you arrived from an ad, and the events “registration completed” and “purchase” (amount and currency, no name or e-mail address). Meta may combine this with the data it holds about you if you have a Facebook or Instagram account.

For the collection and transmission of this data we and Meta are joint controllers (Art. 26 GDPR); Meta’s own processing is governed by its privacy policy at facebook.com/privacy/policy. Meta may process the data in the United States under the EU-US Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via Cookie settings at the bottom of every page; withdrawal does not affect processing before it. Your choice is stored in a preference cookie (dd_consent, 6 months); choosing “Only essential” sets only that cookie. The service is available in full without consent.

11. The dnsdome Android app

The dnsdome app for Android turns dnsdome filtering on and off for your device. Everything above applies to the app as well; this section describes what the app itself does on your device.

• VPN service, DNS only — to take over DNS resolution, the app registers an Android VPN service. The tunnel is configured to carry only DNS queries: no other traffic enters it, and the app never sees, inspects or routes your browsing or app traffic. DNS queries sent through the app are processed as DNS query logs exactly as described in sections 2 and 6, attributed to your device’s current public IP address.
• Sign-in and credential storage — your e-mail address and password are sent only to our own API over an encrypted connection to obtain an access token. The app stores that token encrypted on your device (Android EncryptedSharedPreferences); your password is not persisted. If you choose Continue with Google instead, the app asks Android’s Google account service for a signed Google ID token for the account you pick and sends that token to our API over an encrypted connection, to sign you in or to create your account; Google learns that you signed in to dnsdome, and we keep from Google only what section 2 lists (account identifier, e-mail address, display name). The app never receives your Google password.
• No analytics or advertising SDKs — the app contains no analytics, advertising, tracking or crash-reporting components. Apart from the fail-open fallback described below it communicates only with dnsdome servers operated by the controller, with one exception: the Continue with Google button uses Google’s Credential Manager and Google Play services libraries, which talk to Google only when you tap that button.
• Update check — the app downloaded from dnsdome.com fetches a small version manifest from dnsdome.com at most once a day to learn whether a newer release exists. This request carries no account identifier; like any web request it discloses your IP address to us as the site operator. The app installed from Google Play makes no such request; Google Play updates it.
• Fail-open mode — in fail-open mode (the default, changeable on the app’s home screen), if the dnsdome resolvers are unreachable, the app temporarily forwards DNS queries to the DNS servers of the network you are connected to. During such periods those queries are visible to that network’s operator and are not filtered or logged by us. In fail-closed mode (the alternative), no queries leave the device instead.

12. Deleting your account

You can delete your dnsdome account, including an account created for or used with the Android app, at any time:

• Self-service — sign in at app.dnsdome.com, open Profile and choose Delete account permanently. The deletion is immediate.
• Disconnecting Google or Facebook only — in Profile → Connected accounts choose Disconnect next to the provider. This removes the stored Google or Facebook identifier, e-mail address and display name at once while keeping your dnsdome account; it is refused only while that sign-in is your sole way in (set a password or connect another account first). These are also the data deletion instructions for the dnsdome app on Facebook: deleting your dnsdome account, or disconnecting Facebook, erases everything we received from Meta.
• By e-mail — write to info@dnsdome.com from the address you signed up with, and we delete the account within 30 days.

Deletion erases all configuration, DNS query logs and statistics of the account, as described in section 6; only invoices are retained where accounting law requires it. Uninstalling the Android app removes the access token it stored on your device; it does not delete the account itself.