The short version
- We use IP addresses to stop bots and abuse, and to estimate roughly where a request comes from.
- We store your mobile number to verify your account and to protect your logins with a texted code.
- Your email address, domains and phone number are never used for direct marketing and never sold to data brokers or anyone else.
- We email you only about your account. Promotions go out only through a separate newsletter you have to opt in to twice.
1. Who we are
NSResolver (nsresolver.com) is a DNS hosting service operated by [Company legal name], [postal address] (“we”, “us”). We are responsible for the personal data described here. Questions about this policy or your data go to support@nsresolver.com.
2. What we collect
Account information
When you sign up we collect your name, company name (optional), email address, a password and a mobile phone number. We store your password only as a salted Argon2 hash, so we can’t read it. Your phone number is saved only after you confirm it with a texted code.
DNS data
The domains you add and the records you create. DNS is a public system: once a zone is live, anyone on the internet can look up its records. Don’t put anything in a DNS record you wouldn’t want published.
IP addresses and technical data
Like any website, our servers see the IP address and browser details (user agent) of every request. We use them in:
- Web server logs, which record each request’s IP address, time, page and browser.
- Security records, such as failed login attempts (IP address and the email address tried), and short-lived counters that limit how often an address can sign up, request texts or send messages.
- Approximate location (country or region), worked out from the IP address. We use it to spot abuse and fraud, and to limit text messages to the countries we support.
Billing information
If you buy a paid plan, payment is handled by Stripe (see section 7). We receive and keep your plan, payment history and invoices, plus the limited card details Stripe passes back (card brand, last four digits and expiry date) and, where tax rules require it, your billing name, country and postal code. We never see or store your full card number or security code.
Messages you send us
If you use the contact form or email us, we receive what you send: typically your name, company, email address, domain, phone number and message, along with your IP address.
3. How we use it
- To run the service: hosting your zones, operating your account, billing paid plans, and answering your support requests.
- For account verification and security: your mobile number confirms you’re a real person, makes sure each number belongs to only one account, and receives the codes for multi-factor login and password resets.
- To prevent abuse: we use IP addresses and approximate location to block bots, limit repeated attempts, and investigate fraud or attacks on the service or our customers.
- To meet legal obligations, where the law requires it.
For visitors in the EU and UK, our legal bases are: performing our contract with you (running your account), our legitimate interest in keeping the service secure and free of abuse, compliance with the law, and your consent (for the newsletter).
4. What we never do
- We never sell, rent or trade your personal data, to data brokers or anyone else.
- We never use your email address, domains or phone number for direct marketing, and never pass them to anyone else for marketing.
- We don’t show ads, and we don’t use advertising or cross-site tracking cookies.
- We don’t profile or sell information about the DNS queries your domains receive.
5. Emails and texts we send
We contact you only for account purposes: verification and login codes, password resets, security alerts, important changes to the service or this policy, and replies to your messages. These aren’t optional while you have an account, because they’re how we keep it secure.
We don’t send promotional email to account holders. If we offer news or promotions, they’ll go out only through a separate newsletter that uses double opt-in: you sign up, then confirm with a link we email you. Creating an account never subscribes you, and every newsletter email has a one-click unsubscribe link.
6. Cookies
We use only the cookies needed to run the site:
nsr_sessionkeeps you logged in and protects forms against forgery. It lasts up to 7 days.nsr_deviceremembers that this browser has completed a texted code, so you aren’t asked for one at every login. It lasts 30 days.
We don’t use analytics, advertising or third-party tracking cookies, and our pages load no scripts, fonts or images from other companies. When you pay for a plan, Stripe’s payment page may set its own cookies to process the payment and prevent fraud; see Stripe’s cookie policy.
7. Who we share data with
We share data only with service providers that help us run NSResolver, and only what each one needs:
- Twilio sends our verification text messages. It receives your mobile number, and its use of that number is limited to delivering the message and preventing fraud.
- Stripe processes payments for paid plans. Your card details go straight to Stripe, never to us. Stripe receives your payment details, email address, billing details and IP address so it can take payment, meet financial regulations and prevent fraud. Its use of that data is covered by the Stripe Privacy Policy.
Our website, database and email run on servers we operate ourselves. We may also disclose data when the law requires it, for example in response to a valid court order, or when necessary to protect the safety of our users or the service. Where we’re allowed to, we’ll tell you first.
8. How long we keep it
- Account information and DNS data: for as long as your account is open. When you ask us to close it, we delete it within 30 days, except where the law requires us to keep something longer.
- Billing records (payments and invoices): for as long as tax and accounting laws require, typically up to 7 years, even after an account is closed.
- Web server logs: about 7 days.
- Abuse counters: between a few minutes and 24 hours.
- Failed login records (IP address and the email address tried): 7 days, then automatically deleted.
- Support messages: as long as we need them to help you and keep a record of what was agreed.
9. How we protect it
All traffic to nsresolver.com is encrypted with TLS. Passwords are stored as Argon2 hashes, logins require a texted code on new browsers, and access to our systems is limited to the people who run them. No system is perfectly secure, but we take reasonable technical and organisational steps to protect your data, and we’ll tell you promptly if a breach affects it.
10. Where it’s processed
Our servers are in [country]. Service providers such as Twilio and Stripe may process data in other countries. Where data about EU or UK residents leaves those regions, we rely on the safeguards the law provides, such as standard contractual clauses.
11. Your rights
You can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that’s wrong;
- delete your account and its data;
- restrict or object to how we use your data; or
- send your data to you in a portable format.
Email support@nsresolver.com from the address on your account. We’ll answer within 30 days. If you’re in the EU or UK, you also have the right to complain to your local data protection authority.
12. Children
NSResolver is a business service and isn’t meant for anyone under 16. We don’t knowingly collect data from children. If you believe a child has given us personal data, contact us and we’ll delete it.
13. Changes to this policy
If we change this policy, we’ll update the date at the top of this page. If a change is significant, we’ll also email account holders before it takes effect.
14. Contact
[Company legal name], [postal address]. Email support@nsresolver.com or use our contact form.