Privacy policy
Datenschutzerklärung
Last updated
- We only process what running dns.lgbt needs: no tracking, analytics, advertising or third-party scripts.
- Our only cookies keep you signed in. An account needs no email address.
- DNS records are public: answering everyone who asks for them is what DNS is for.
- On your account page you can download all your data and delete your account at any time.
1. Who is responsible
Lilly SchrammSchramm Softwarec/o Online-Impressum.de #5241Europaring 9053757 Sankt AugustinGermanyEmail: kontakt@schramm.software
Phone: +49 1517 2848510
2. What we process, why and for how long
Legal bases (Art. 6 (1) GDPR): (a) your consent, (b) our agreement with you, the terms of service, (c) a legal obligation, (f) our legitimate interest in a working, secure service free of abuse.
| What | Why | Kept |
|---|---|---|
| Server logs of the website and the API (IP address, time, page, browser) | Delivering pages, finding attacks and errors (f) | 30 days at the latest |
| IP addresses (over Tor: the circuit) to limit requests: forms, sign-ins, API, DNS UPDATE, proxies, onion nodes, key directory | Protection against abuse and overload (f) | In memory, a minute after the last request (sign-ins: up to an hour); never logged |
| Networks and names our nameservers rate-limit | Stopping our nameservers from being used for attacks (f); other queries aren’t logged | 30 days at the latest |
| Your account: username, password hash, recovery codes, two-factor key, passkeys, optional email address, wrong sign-in tries, the invite you used, your limits, hidden notices | Running your account (b) | Until you delete your account (wrong tries: until the next sign-in; invites: 30 days after use) |
| When you agreed to the terms, and to which version | Showing what applies between us (b) | Until you delete your account |
| Domains, records, DNSSEC keys, proxied names, onion services and their keys, the key directory setting, API tokens, your certbot key | Hosting your DNS (b). Records, and that a domain was added to dns.lgbt, are public | Until you delete them or your account; domains not set up in time 24 hours; tokens 30 days after expiry |
| Emails and inbox notices we send you | Telling you about your domains and account (b); no newsletters or advertising | Until you delete your account |
| Support tickets, their messages and files (images re-encoded without metadata). While answering, admins see your account’s domains, recent log entries, limits and how you sign in | Helping you (b), and being able to show what we said (f) | 180 days after the ticket closed, also after you delete your account |
| Query counts per domain, proxy and onion traffic per name, failed connections to your servers (nothing about who asked or visited) | Statistics for you and our status page, monthly traffic limits (b, f). You can turn query statistics off per domain | 90 days (failed connections 7 days, monthly totals 13 months, network-wide daily totals without names 371 days) |
| Security log: sign-ins, changes and other events, with your account ID and email address | Security and finding abuse (f); your dashboard shows your record changes from it (b) | 90 days, also after you delete your account |
| Reports about domains (anyone): what was reported, optional name and email address, our decision | Handling reports (c, Art. 16 DSA; f). We don’t tell the domain’s holder who reported | 180 days after we decided |
| OpenPGP keys uploaded to a key directory (anyone): the address, the key, its fingerprint | Publishing the key once the address confirmed it (a); it is public then | Until removed; unconfirmed uploads 24 hours |
| Emails to us; names on our security page’s thank-you list | Answering you (b, f); thanking you (a) | Until settled; until you ask us to remove you |
| Administrators only: account and sign-in history (IP address, place, browser) at id.schramm.software, our own sign-in service | Signing in securely (b, f) | Sign-in history 90 days |
| Traffic through our Tor relays | Supporting the Tor network (f) | Only in memory while it passes, never logged |
| Encrypted backups of our database | Recovering from failures (f) | 30 days |
3. Where it runs and who receives it
Our servers run in Europe, at providers that process data on our behalf (Art. 28 GDPR): Hetzner Online GmbH (website, app, database, mail server, backups and proxies; Germany and Finland), Securebit AG (nameservers and key directory; Switzerland and Germany), Servperso Systems (nameserver; Germany), xTom GmbH (nameserver; Estonia) and IONOS SE (onion nodes and Tor relays; Germany). Switzerland has an adequacy decision of the European Commission (Art. 45 GDPR). Files of support tickets are stored by Backblaze, Inc. in Amsterdam, and id.schramm.software is reached through Cloudflare, Inc.; both are US companies certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
Only when you ask for it, and only with names that are public anyway: the propagation check asks public resolvers (Google, Cloudflare, Quad9, OpenDNS, AdGuard, Control D, DNS4EU), and the key directory gets certificates for openpgpkey.<domain> from Let’s Encrypt (ISRG, USA), which publishes them in the Certificate Transparency logs (Art. 49 (1) (b) GDPR). Our Tor relays publish their address and our email address in Tor’s public list of relays. We give data to authorities only where the law obliges us, and never sell it.
4. Cookies
We only store what is strictly necessary on your device (§ 25 (2) No. 2 TDDDG), so it needs no consent: the session cookie next-auth.session-token (12 hours), cookies that secure signing in (next-auth.csrf-token, next-auth.callback-url, next-auth.state, next-auth.pkce.code_verifier) and your appearance in local storage (theme).
5. Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), and to receive it in a machine-readable format (Art. 20). The download and the deletion are on your account page; for anything else, write to us. You can withdraw a consent at any time, for the future (Art. 7 (3)). You can complain to a data protection authority (Art. 77), for example the one responsible for us:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-WestfalenPostfach 20 04 4440102 DüsseldorfGermany
Right to object: where we rely on our legitimate interest (f), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR), by email to kontakt@schramm.software.
6. Anything else
You need an account, with a username and a password, to manage domains; everything else is optional. We make no automated decisions with legal effect and create no profiles (Art. 22 GDPR); domains not set up in time are removed automatically. We update this policy when what we do with data changes; the date at the top says when it last did.