Privacy Policy & Data Protection Pledge

1. Information We Collect

OnlyDNS operates on the principle of Data Minimization. We collect only what is strictly necessary to provide reliable, secure DNS hosting:

• Account Registration & Authentication: When creating an account, we collect your name, email address, password hash (salted and securely hashed with Argon2id), and authentication tokens (API keys and TSIG keys).
• Domain Zone Data: The domain names, resource records (A, AAAA, CNAME, MX, TXT, SRV, CAA, etc.), and DNSSEC configurations you submit for authoritative resolution.
• Billing & Payment Information: When you provide payment details for paid subscriptions, credit card information is stored fully encrypted using industry-standard cryptography, along with your billing and transaction history.
• Operational Security & Diagnostics Telemetry: When DNS queries reach our 23 Anycast edge nodes, we process transient network metrics (query counts, packet rates, error codes) solely to calculate account quota usage, prevent DDoS attacks, and diagnose infrastructure health. We do not build individual browsing profiles or monetize query streams.

2. How We Use Your Information

We use the information we collect exclusively for the following operational purposes:

• Provisioning, maintaining, and serving authoritative DNS responses across our global Anycast network.
• Authenticating access to the OnlyDNS Web Portal, CLI, REST API, and Model Context Protocol (MCP) servers.
• Delivering critical account notices, such as security alerts, billing invoices, or scheduled maintenance updates.
• Enforcing acceptable use, mitigating volumetric DDoS attacks, and securing our global edge infrastructure against abuse.

3. Absolute Prohibition on Data Selling & Sharing

We do not sell, rent, license, or disclose your personal information or DNS query logs to third parties. We will only share data under the following strictly limited exceptions:

• Essential Service Providers: Trusted infrastructure sub-processors (such as PCI-compliant payment gateways and transactional email delivery providers) strictly bound by data protection agreements.
• Legal Compliance: If required by a valid court order or subpoena from jurisdiction governing OnlyDNS. We scrutinize every legal request and reply only when legally required.

4. Data Security & Encryption Standards

We apply defense-in-depth security measures to protect your infrastructure:

• All web and API traffic is encrypted in transit using modern TLS 1.3 cryptography with strict HSTS headers.
• Zone records, credentials, and configuration databases are encrypted at rest using industry-standard AES-256.
• Administrative access is strictly restricted through multi-factor authentication (MFA) and least-privilege role boundaries.

5. Your Privacy Rights (GDPR & CCPA Compliance)

Regardless of your geographic location, OnlyDNS provides the following privacy rights to all customers:

• Right to Access & Export: You can inspect and export all your zone files, records, and account data at any time via the Web Portal or REST API.
• Right to Rectification: You have direct control to update or correct your personal details in real time.
• Right to Erasure ("Right to be Forgotten"): You may delete your account and all associated DNS zones at any time. Upon account termination, your data is permanently expunged from production systems.

6. Cookies & Tracking Technologies

OnlyDNS uses only essential, first-party session cookies required for authentication and CSRF security in the customer portal. We do not use third-party tracking cookies, Google Analytics, Facebook pixels, or advertising beacons.

7. Contact Us Regarding Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection team: