Last updated 20 July 2026

Privacy Policy

We collect as little as we can and never sell your data. This notice explains what we hold and why. We're the data controller for dnsdoctor.dev; contact us at [email protected].

What we collect

For the free scanner, no account is needed. We store scan results (the DNS records we read for the domains you check — public data) and privacy-respecting usage analytics, with IP addresses truncated so they can't identify you. For Monitor, we store your email address, the domains you choose to monitor, and — once that feature ships — the DMARC aggregate (RUA) XML reports your mail receivers send about your domains.

How we use it

To run the diagnosis, send you magic-link sign-in emails and the alerts you ask for, and to understand which pages are useful. We use a magic-link email login — no passwords. We don't use your data to train third-party models, and we don't send you marketing you didn't request.

Who we share it with

A short list of processors that make the service work: Paddle (our merchant of record — it handles payments and tax; we never see your card), Postmark (sends our sign-in and alert emails), and our hosting and error-monitoring providers. Each processes data only to provide their part of the service.

We also use Cloudflare Turnstile for invisible bot protection on our scan, sign-in, and email forms. It runs without a visible challenge and processes limited device and network signals to tell humans from automated traffic, as described in Cloudflare's Turnstile Privacy Addendum.

Retention

Monitor keeps your reports for 12 months. Sign-in tokens expire within minutes and are single-use. If you close your account we delete your personal data, keeping only what law or tax rules require.

Your rights

Under the GDPR and similar laws you can access, correct, export, or delete your personal data, and object to processing. Email [email protected] and we'll act on it. You may also complain to your local data-protection authority.

Changes

We may update this notice; the “last updated” date above tracks changes.