YOUR DATA. YOUR CHOICES.
Data privacy
Who is responsible?
Vitali Quiering
Luckmoor 14c, 22549 Hamburg, Germany
For privacy requests, contact [email protected].
Account and monitoring data
We process email addresses, password hashes, memberships, sessions and security credentials to provide and protect your account. We store the domains and records you monitor, DNS responses, settings, changes and incidents. The service queries DNS resolvers and, when configured, provider APIs and notification destinations.
Account services are provided to perform the requested service (Article 6(1)(b) GDPR). Security and abuse prevention serve our legitimate interest in protecting the service (Article 6(1)(f) GDPR).
Closed beta waitlist and email
When you join the waitlist, we store your email address and request time to contact you about beta access, based on your consent (Article 6(1)(a) GDPR). Joining does not create an account. If invited, you receive a personal setup link. An account is created when you accept the invitation and choose a password. You can withdraw your request by contacting us. Account recovery and configured monitoring notifications are delivered through the operator’s SMTP service. The operator also receives an email notification of each new waitlist signup.
Support and feature requests
When you send a request in the app, we store its type, topic, subject, message, your account email and the selected organization to respond to your request. Requests are visible only to their sender through the app and are emailed to the operator’s support inbox. A confirmation is sent to your account email.
We process support requests to provide the service (Article 6(1)(b) GDPR) and feedback to improve it (Article 6(1)(f) GDPR). Requests are deleted from the application after 90 days, or earlier when the account or associated organization is deleted. Email copies follow the support inbox’s retention policy. Please do not include secrets.
Necessary storage and Cloudflare Turnstile
The session cookie is necessary for sign-in. Local storage remembers your display theme and your analytics choice. These are separate from optional analytics.
We use Cloudflare Turnstile to protect form submissions against automated abuse. The check loads when you submit a form, independently of analytics consent. Your browser connects to Cloudflare, which processes connection and browser information to assess the request. The backend validates a short-lived, single-use token. Turnstile does not replace authentication or organization permissions.
Optional Google Analytics
Google Analytics 4 is loaded only after you select “Accept analytics”. It measures public page visits and general application sections to help improve DNStracr. Our application does not send form contents, email addresses, monitored domains, organization IDs, authentication tokens, or URL query parameters as analytics event data. Security, account settings and platform support views are excluded. Advertising features are disabled.
Google processes connection information and analytics identifiers, including analytics cookies such as _ga. This processing is based on your consent (Article 6(1)(a) GDPR). You may refuse without losing access and withdraw consent through “Cookie settings” at any time. Withdrawal stops future analytics and deletes accessible Google Analytics cookies; it does not undo earlier processing.
See Google’s privacy policy. Cloudflare and Google may process data outside the EEA; their processing terms and applicable transfer safeguards apply. The operator must confirm the actual service contracts and configured retention settings.
Retention and deletion
Raw DNS checks follow the retention period shown in organization settings. Changes and incidents remain until their monitor, domain or organization is deleted; organization audit records remain until organization deletion. You can export organization data and request deletion. Waitlist requests remain until withdrawn or removed by the operator. Hosting logs, backups, SMTP and Google Analytics retention depend on the operator’s configured policies; these periods must be documented before the notice is finalized.
Your rights
Where applicable, you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. You can withdraw consent at any time and lodge a complaint with a data protection supervisory authority. Contact us using the address above.