Privacy policy
Everything this website and this resolver store about you, why, and for how long.
Last updated
The short version
The resolver does not log your queries. This website stores an account record if you make one, an enquiry if you send one, a review if you leave one, and a privacy-preserving page count if you agreed to analytics. Service providers process data only to run the site; it is not sold, used for advertising or shared for tracking.
Who is responsible
NetGuard Systems Ltd, which is not yet incorporated and therefore has no company number to give you, at Wenlock Studios, 50-52 Wharf Road, London N1 7EU, United Kingdom. For anything about your data, email hello@netguard.example.
What the resolver stores
Nothing about you, by default. Answers are cached in memory so they can be served quickly; that cache holds domain names and their addresses, not who asked. Query logging exists as an option for people troubleshooting their own instance, is off unless switched on, and writes to your own disk on a self-hosted install.
On the hosted plan we hold the network's configuration, which is the lists you enabled and any allowlist entries you added. We do not hold a record of resolved names.
What this website stores
If you make an account
Your email address, a display name, and a salted PBKDF2-HMAC-SHA-256 hash of your password. We never store the password itself. We also keep the time you last signed in, and one record per active session containing a random identifier, an expiry and the browser's user agent string.
Kept until you delete the account, which you can do yourself from the dashboard.
If you send an enquiry
Your name, email address, optional organisation, chosen topic and message, plus a reference so we can both refer to it. Kept for twelve months, then deleted.
If you leave a review
The display name and role you chose, your rating, the review text, and your email address. The email is used once to check the review is genuine, then removed from the record. The rest is published only if you gave permission by submitting it, and only after a person has read it.
If you accept analytics
A record per page view containing the path, the date, the referring site's hostname, any UTM parameters in the URL, and a visitor hash. The hash is SHA-256 of your IP address, user agent, the date, and a secret salt, truncated to sixteen characters. It changes every day by design, so it cannot be used to follow you across days, and it cannot be reversed to recover your address.
Analytics is off until you accept it. If you reject it, no page views are recorded at all. Records older than ninety days are deleted.
Server logs
The edge application records the method, path, status and duration of each request so faults can be diagnosed. General rate-limit counters containing an IP address stay only in an edge isolate's memory until their window ends or the isolate is replaced. Failed sign-ins also store a combined email-address and IP-address key for up to 24 hours so the fifteen-minute lockout survives isolate replacement; a successful sign-in removes that key.
What we do not do
- No advertising, no advertising identifiers, no remarketing.
- No third-party analytics. Nothing on this site loads from another origin; the Content-Security-Policy forbids it.
- No selling of data and no sharing for advertising or tracking. Processors receive only what they need to operate the service.
- No profiling, and no automated decisions about you.
- No international transfer except where a named service provider needs it to deliver the service under contractual safeguards.
Lawful bases
- Contract for account and hosted-plan data: we cannot provide the service without it.
- Legitimate interests for enquiries and security logging: answering you, and keeping the service from being abused.
- Consent for analytics and for publishing a review. Both can be withdrawn.
Your rights
Under the UK GDPR you can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, object to processing, or ask us to restrict it. Email hello@netguard.example and we will respond within one month, usually much sooner.
Account holders can export and delete their own data from the dashboard without asking us. If you are unhappy with how we handled a request you can complain to the Information Commissioner's Office at ico.org.uk.
Processors
Netlify provides this site's content delivery, edge application runtime and persistent Blob storage, and is a processor for those purposes. Requests are handled on its global edge network and may be processed outside the United Kingdom and European Economic Area under its contractual safeguards. Transactional email is sent through a provider in the European Economic Area. We use no third-party analytics, tag management or customer messaging service.
Changes
Material changes are announced in the changelog before they take effect, and the date at the top of this page is updated. We do not quietly revise this page.