Privacy policy
This explains what MalvinTech Domains collects, why, and who helps us run it. We keep it short because the service is small.
What we collect
- Account details: username, email address and a hashed password (we never store the password itself).
- Your DNS records and names: everything you add in the dashboard.
- Security data: sign-in and account activity, and technical data such as your IP address, used to keep the service safe and to investigate abuse.
- Optional extras: a two-factor secret if you turn on two-factor sign-in, and API keys you create.
DNS records are public
Anyone on the internet can look up the records for your names. Do not put secrets or private information in a record.
Why we use it
To run your account, publish your records, send verification and reset emails, prevent abuse and follow the law. We do not sell your data and we do not run advertising.
Who processes it for us
- Cloudflare, which publishes the DNS records.
- Railway, which runs the dashboard.
- Neon, which hosts the database.
- Resend, which delivers our emails.
These providers may process data in other countries.
Cookies
The dashboard uses a session cookie to keep you signed in. This public site sets no cookies.
How long we keep it
Account data stays while your account is open. When you delete the account we remove your details and records, except what we must keep for security or legal reasons, for example abuse investigations.
Your choices
You can change your email or password in the dashboard. To see, correct or delete your data, email [email protected] from your account address.
Children
The service is not meant for children under 13, and we do not knowingly collect their data.
Changes
If we change this policy, we update the date above and, for important changes, email account holders.