Privacy Policy
your data, clear rules ↓
Data we keep
- Email — for sign-in and verification codes
- Password — stored as a PBKDF2 hash, never in plain text
- Subdomain and DNS target — the claimed name, record type, and destination
- Creation time — for audit purposes
We do not retain IP addresses in the long-term database. Rate limiting uses temporary storage that expires automatically.
Cookies
One cookie: sid — the HttpOnly, Secure login-session token that lasts 7 days. There are no advertising or third-party tracking cookies.
We send only OTP verification and account-administration email. There is no marketing email — you will not receive promotions from us.
Delete data
Want your account and subdomain removed? Contact us through the About page and we will process the request.
Third parties
The service runs on Cloudflare for DNS, hosting, and security, and sends email through SendPulse/Resend. They process data only as needed to operate this service under their own privacy policies.
Last updated: October 20, 2026