Privacy Policy

Last updated: April 5, 2026

1. Introduction

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services. By using SecondDNS, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect the following types of information:

Account Information: When you register, we collect your name (optional), email address, and a password (stored as a cryptographic hash).

Usage Data: We automatically collect certain information when you use our service, including your IP address, browser type, operating system, referring URLs, and pages visited.

DNS Zone Data: When you add a DNS zone, we store the zone name, the IP address of your primary DNS server, and zone records synchronized via AXFR.

Payment Information: If you subscribe to a paid plan, payment is processed by a third-party provider. We do not store your full credit card details.

3. How We Use Your Information

We use the information we collect to:

– Provide, operate, and maintain our secondary DNS service – Process transactions and send related information, including confirmations – Send administrative information, such as changes to our terms or policies – Respond to your comments and questions and provide customer support – Monitor and analyze usage and trends to improve your experience – Detect, investigate, and prevent fraudulent transactions and other illegal activities – Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned:

Performance of a contract: Processing is necessary to provide the services you have requested.

Legitimate interests: We process data for our legitimate business interests, such as fraud prevention and service improvement, where these interests are not overridden by your rights.

Legal obligation: Processing may be necessary to comply with applicable law.

Consent: Where required by law, we will obtain your consent before processing your data for specific purposes.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information.

Essential cookies: Required for the operation of our service (e.g., session authentication).

Analytics cookies: Help us understand how visitors interact with our service (e.g., page views, error tracking).

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some parts of our service may not function properly.

6. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

Service Providers: Third-party companies that perform services on our behalf, such as payment processing, email delivery, and infrastructure hosting. These providers are contractually obligated to protect your information.

Legal Requirements: We may disclose your information if required by law, court order, or government authority.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion or trial expiry with no plan selection:

– Account data is deleted within 30 days – DNS zone data is deleted immediately upon account termination – Backup copies may persist for up to 7 days

We may retain certain information longer if required by law or for legitimate business purposes such as fraud prevention.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you. Right to rectification: Request correction of inaccurate or incomplete data. Right to erasure: Request deletion of your personal data ("right to be forgotten"). Right to restriction: Request that we restrict processing of your data. Right to data portability: Receive your data in a structured, machine-readable format. Right to object: Object to processing based on legitimate interests or direct marketing.

California residents (CCPA): You have the right to know what personal data is collected, the right to delete it, and the right to opt-out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us at [email protected].

9. Children's Privacy

Our service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your country. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

11. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS), hashed password storage, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or by posting a prominent notice on our website. The date of the most recent revision will appear at the top of this page. Your continued use of our service after any changes constitutes your acceptance of the new policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

We will respond to your inquiry within 30 days.