Last updated 15 October 2026

Privacy Policy

We collect as little as we can and never sell your data. This notice explains what we hold and why. We're the data controller for dnsdoctor.dev; contact us at hello@dnsdoctor.dev.

What we collect

For the free scanner, no account is needed. We store scan results (the DNS records we read for the domains you check — public data) and privacy-respecting usage analytics, with IP addresses truncated so they can't identify you. For Monitor, we store your email address, the domains you choose to monitor, and the DMARC aggregate (RUA) XML reports your mail receivers send about your domains.

If you sign in with Google or GitHub, we take one thing from it: your verified email address. We never receive your password, and we don't ask for your profile, contacts, or repositories. If the provider can't give us a verified address, we refuse the sign-in rather than fall back to an unverified one.

Cookies

First-party cookies only — no third-party ones and no advertising or tracking networks. Sign-in cookies, set only when you sign in, which keep you signed in. And dd_ref, set on your first visit and kept for 30 days, which records only how you arrived — the site that linked you and the page you landed on — so we can tell which channels bring people here. It holds nothing about you, is never read by anyone else, and is not set at all if your browser sends a Do Not Track signal.

How we use it

To run the diagnosis, send you magic-link sign-in emails and the alerts you ask for, and to understand which pages are useful. You sign in with Google, GitHub, or a magic-link email — never a password, because we don't store one. We don't use your data to train third-party models, and we don't send you marketing you didn't request.

The emails we send carry an open-tracking pixel and tracked links, so we can tell whether our messages are useful. Nobody beyond our email provider (Postmark) sees that.

Who we share it with

A short list of processors that make the service work: Paddle (our merchant of record — it handles payments and tax; we never see your card), Postmark (sends our sign-in and alert emails), and our hosting and error-monitoring providers. Each processes data only to provide their part of the service.

An AI language-model provider writes the plain-English explanations in our reports and the AI assessment of a lookalike domain's website. For that it receives public DNS results and the public web pages being compared, never your email address or account details, and under its API terms it does not train its models on them.

If you run an email test, we keep only the verdicts and selected header details of the one message you send (never its body or attachments), for 24 hours when the test was started without an account and 90 days when it was started from your account (after its first day, only your account can open it), and a redacted excerpt (the subject and the start of the text, with addresses, links and long numbers masked) goes to an AI language-model provider for the optional content hints, under terms that exclude training on it.

If you choose to report a lookalike domain to Netcraft from your dashboard, we send Netcraft your account email (as the reporter) and the lookalike's address with a short factual description. Nothing is sent unless you confirm it.

If an agent pays for an API call over the x402 protocol, the signed payment authorization it sends — including its wallet address — goes to Coinbase's x402 facilitator to verify and settle it, and the settlement is public on the Base blockchain. We never log the payment header itself.

We also use Cloudflare Turnstile for invisible bot protection on our scan, sign-in, and email forms. It runs without a visible challenge and processes limited device and network signals to tell humans from automated traffic, as described in Cloudflare's Turnstile Privacy Addendum.

Signing in with a provider is a two-way street worth naming: choosing that route tells Google or GitHub that you signed in to DNS Doctor, and what they do with that is governed by their own privacy policies, not this one. The magic-link option involves neither of them.

Retention

Monitor keeps your reports for 12 months. Sign-in tokens expire within minutes and are single-use. Feedback you send from the dashboard is kept with your account; files you attach to it are forwarded to our support inbox and are not kept on our servers. Email test results stop being readable 24 hours after the test started (90 days for a test started from an account) and are deleted within a day after that; our encrypted nightly backups roll over after 14 days. If you close your account we delete your personal data, including its email test results, keeping only what law or tax rules require.

Your rights

Under the GDPR and similar laws you can access, correct, export, or delete your personal data, and object to processing. Email hello@dnsdoctor.dev and we'll act on it. You may also complain to your local data-protection authority.

Changes

We may update this notice; the “last updated” date above tracks changes.