Privacy Policy

Last Updated: September 2026

1. Introduction

DNSMonit is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our DNS monitoring service.

2. Information We Collect

Account Information:

  • Email address (required for account creation)
  • Name and profile picture (optional, via Google Sign-In)
  • Password (hashed, for email/password accounts)

Domain Monitoring Data:

  • Domain names you add for monitoring
  • Public DNS records associated with your domains
  • WHOIS information (publicly available)

Usage Data:

  • IP address and browser information
  • Pages visited and features used
  • Time and date of access
  • For signed-in users: interactions within the app (clicks, page flows) and session recordings with every form field masked

3. How We Use Your Information

  • Provide and maintain the DNS monitoring service
  • Send DNS change alerts and expiration notifications
  • Process subscription payments
  • Communicate important service updates
  • Improve and optimize the platform

4. Data Sharing

We do not sell your personal data. We share data only with these service providers:

  • Stripe - Payment processing
  • Resend - Email delivery
  • Google - OAuth authentication (if you use Google Sign-In)
  • PostHog (EU Cloud, Frankfurt) - Product analytics
  • Sentry - Error monitoring

5. Data Security

We protect your data using:

  • Encryption in transit (HTTPS/TLS)
  • Secure password hashing (bcrypt)
  • Regular security reviews
  • Access controls and authentication

6. Data Retention

We retain your data as long as your account is active. When you delete your account, all personal information and domain monitoring data is permanently removed from our systems.

7. Your Rights (GDPR)

If you are in the EU, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Export your data
  • Object to data processing

You can exercise these rights through your account settings or by contacting us.

8. Advertising Measurement

If you reach DNSMonit from an advertisement, the campaign parameters in that link (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and the advertising click identifier Google adds (gclid, or gbraid/wbraid where advertising cookies were not consented to) are stored against your account if you go on to create one. They are recorded once, at signup, and never updated afterwards.

We use them for one purpose: to know which advertising produced an account, so we can stop paying for advertising that does not. The click identifier is exported periodically to Google Ads, which already issued it, so that a signup can be matched to the click that caused it. It is not shared with anyone else, is not used to build a profile of you, and is not sent to our analytics provider — PostHog receives only the campaign name and whether a click identifier exists.

No advertising cookie or tracking pixel is placed in your browser. The parameters come from the link you followed and are kept on our own servers, attached to your account. Deleting your account deletes them with it. You may ask us to remove them at any time without closing your account.

9. Cookies and Analytics

Visitors (not signed in): we measure audience with PostHog in cookieless mode. No cookie or browser storage is used; visits are counted with a daily-rotating, irreversible hash computed on PostHog's EU servers, and your IP address is not stored.

Signed-in users: in addition to the essential session cookie, we use a first-party PostHog cookie to understand how the product is used and to improve it (feature usage, errors, and session recordings in which every form field is masked). This data is linked to your account, is hosted in the EU, is never sold, and is not used to track you across other websites. You can object to this processing at any time by contacting us.

If you arrive from one of our adverts: the link carries a campaign identifier, and we ask whether we may keep it. If you agree, it goes in a single first-party cookie for up to 30 days, so that a sign-up can be matched to the advert that led to it — people rarely decide on the first visit. It cannot be read by scripts, it is never sent to another website, it is used for nothing but measuring our own advertising, and it is deleted as soon as you create an account. It contains nothing but the campaign parameters that were already in the link you followed. Say no and only the refusal is remembered, so we do not ask again. Arrive any other way and you are never asked and nothing is stored at all.

10. Changes to This Policy

We may update this policy from time to time. Significant changes will be notified via email. The "Last Updated" date at the top indicates when the policy was last revised.

11. Contact

For privacy-related questions, please contact us at our contact page.