Informativa sulla Privacy

1. Who We Are

DNSBLU (dnsblu.com) operates as a professional network diagnostics and domain intelligence platform. We provide DNS lookup, WHOIS query, blacklist checking, SSL analysis, ping test, traceroute, reverse IP lookup, IP geolocation, safe browsing checks, USOM checks, domain extension directory, and a REST API for developers. This Privacy Policy applies to all services operated under the dnsblu.com domain.

2. Data We Collect

We collect and process minimal data necessary to operate our services effectively. The types of data we may collect include:

• Query data: Domain names, IP addresses, and TLD identifiers submitted through our web interface or API are logged anonymously for service improvement, abuse prevention, and database enrichment purposes.
• Search history: We maintain an anonymized log of queries (domain/IP only) to power the "Recent Audits" feature on our homepage and to build our Reverse IP and domain intelligence databases.
• IP address of visitor: Your browser's IP address is temporarily logged in our web server access logs for security, rate limiting, and abuse prevention. These logs are not permanently retained and are not linked to personal identities.
• API account data: For API subscribers, we store account credentials (API key/ID), associated IP whitelist configurations, usage statistics, and billing-related information necessary to provide and manage the service.
• Browser preferences: We use browser cookies to remember your chosen language and display theme (dark/light mode) to personalize your experience.

3. Data We Do Not Collect

DNSBLU is designed with privacy in mind. We explicitly do not collect:

• Names, email addresses, or any personally identifiable information (PII) from general (non-API) users.
• Payment card details or banking information (payments are processed by third-party payment providers).
• Browser fingerprints, device identifiers, or behavioral tracking data.
• The content of DNS records, WHOIS data, or SSL certificates beyond what is temporarily displayed to the querying user.

4. How We Use Collected Data

Data collected by DNSBLU is used exclusively for the following purposes:

• Providing and operating the requested diagnostic services (DNS, WHOIS, SSL, Ping, Traceroute, Blacklist, etc.).
• Enriching our internal Reverse IP lookup database and domain intelligence systems to improve result accuracy.
• Displaying anonymized "Recent Audits" on the homepage to show platform activity.
• Enforcing rate limits and blocking abusive or malicious actors to protect platform integrity.
• Managing API subscriptions, billing cycles, and quota tracking for API customers.
• Generating aggregate, anonymized usage statistics to optimize infrastructure performance.

We never sell, rent, trade, or share your data with advertising networks, data brokers, or any third parties for commercial purposes.

5. Cookies and Local Storage

DNSBLU uses the following minimal set of browser cookies:

• Language preference cookie: Stores your selected interface language (e.g., "tr", "en", "es") to persist your localization choice across sessions. This cookie contains no personal data.
• Theme preference: Stores your dark/light mode preference. This is a purely functional cookie containing no personal data.
• Session security cookie: Used for API subscriber sessions to protect against cross-site request forgery (CSRF) attacks. This cookie is essential for secure account management and is cleared when your session ends.

We do not use third-party advertising cookies, tracking pixels, or social media tracking scripts. You can clear DNSBLU cookies at any time through your browser settings without affecting your ability to use the platform.

6. Third-Party Data Sources

To provide accurate diagnostic results, DNSBLU queries several external third-party services during tool execution. These include:

• Public DNS resolvers and authoritative nameservers for DNS record lookups.
• IANA, ICANN-accredited registrar WHOIS servers, and RDAP endpoints for domain and IP registration data.
• Third-party DNSBL/RBL operators (Spamhaus, SORBS, Barracuda, etc.) for blacklist checks.
• Third-party GeoIP database providers for IP geolocation data.
• Google Safe Browsing and other threat intelligence APIs for safe browsing assessments.
• USOM (BTK) for Turkish government-maintained blocked domain data.

When you submit a query, the target domain or IP address is transmitted to relevant third-party APIs as part of the lookup process. These transmissions are inherent to the service function and are disclosed here for transparency. DNSBLU is not responsible for the privacy practices of these external services.

7. API Subscriber Data

For API subscribers, we collect and store the minimum necessary data to provide and manage API access:

• API key/ID credentials (stored securely with cryptographic hashing).
• Whitelisted IP addresses permitted to use the API credentials.
• API usage statistics (endpoint call counts, quota consumption) for billing and rate limiting purposes.
• Query logs associated with your API key for a rolling period, used exclusively for debugging, billing verification, and abuse detection.

API subscriber data is stored on secured servers, encrypted at rest, and is never shared with third parties for commercial purposes.

8. Data Retention

• Anonymized query logs (domain/IP records): Retained indefinitely as part of our intelligence database, but never linked to individual user identities.
• Web server access logs (visitor IPs): Retained for a maximum of 30 days for security and abuse analysis, then purged.
• API subscriber data: Retained for the duration of the active subscription and for a reasonable period thereafter for billing dispute resolution.
• Cookie data: Stored in your browser only. Language and theme cookies persist for up to 1 year. Session cookies are cleared when your browser session ends.

9. Security Measures

DNSBLU implements the following technical security measures to protect data:

• All data transmission is encrypted via TLS 1.2/1.3 (HTTPS enforced with HSTS headers).
• API credentials are stored with cryptographic hashing and are never transmitted or logged in plaintext.
• Access to backend systems is restricted through IP whitelisting and multi-layer authentication.
• Rate limiting and automated abuse detection systems actively monitor and block malicious traffic patterns.
• Database servers are isolated from public network access and are accessible only through internal encrypted connections.

10. Your Rights

As a user of DNSBLU, you have the following rights with respect to your data:

• Right to access: You may request information about what data we hold associated with your API account.
• Right to deletion: API subscribers may request deletion of their account and associated data by contacting us.
• Right to rectification: You may request correction of inaccurate data in your API account profile.
• Cookie control: You may clear or block cookies at any time using your browser's built-in settings.

General (non-API) users do not create accounts and no personally identifiable data is held against them, so no additional data rights actions are applicable.

11. Children's Privacy

DNSBLU services are intended for use by professionals, developers, and technically literate adults. We do not knowingly collect any data from persons under the age of 16. If you believe a minor has submitted data through our platform, please contact us and we will take appropriate action.

12. Changes to This Policy

DNSBLU reserves the right to update this Privacy Policy at any time. Material changes will be reflected with an updated "Last updated" date at the top of this page. We recommend reviewing this policy periodically. Continued use of DNSBLU following any changes constitutes acceptance of the revised policy.

13. Contact

For privacy-related inquiries, data access requests, or to report a security concern, please contact us through the official DNSBLU communication channels listed on our website. We aim to respond to all privacy-related requests within a reasonable timeframe.