Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

Last updated: October 20, 2025

Quick Summary

Minimal Collection

Only GitHub username, email, and domain preferences

Transparent Storage

Domain records stored in public GitHub repository

No Sharing

We never sell or share your personal data

Information We Collect

Account Information

When you sign in with GitHub, we collect:

  • GitHub username: Used for authentication and domain ownership verification
  • Email address: For account communication and security notifications
  • GitHub profile information: Public profile data as provided by GitHub OAuth

Domain Configuration

  • Subdomain names: The subdomains you register (e.g., "myproject.is-a.software")
  • DNS records: IP addresses, CNAME targets, and TXT records you configure

Usage Information

  • Activity logs: Domain creation, modification, and deletion activities
  • API usage: Rate limiting and abuse prevention data
  • Authentication tokens: Temporarily cached for performance (expires within 1 hour)

How We Use Your Information

Service Provision

  • • Authenticate your account
  • • Manage subdomain allocations
  • • Configure DNS records
  • • Track domain ownership
  • • Provide activity history

Platform Security

  • • Prevent abuse and spam
  • • Enforce rate limits
  • • Verify domain ownership
  • • Detect unauthorized access
  • • Maintain service integrity

Data Storage & Security

Where Your Data Lives

GitHub

Domain Configuration

Domain records are stored as JSON files in our public GitHub repository. This ensures transparency and allows community verification.

Firebase

Authentication

Authentication tokens are managed by Firebase Auth with industry-standard security measures.

Memory Cache

Temporary Data

Performance caches are stored temporarily in memory and automatically expire.

Security Measures

  • Encryption: All data transmitted over HTTPS
  • Authentication: GitHub OAuth with token validation
  • Authorization: Users can only access their own domains
  • Rate Limiting: Protection against abuse and spam
  • Input Validation: All DNS records validated before storage

Third-Party Services

We integrate with the following trusted services to provide our platform:

Purpose: Authentication and domain record storage

Data Shared: Username, email, profile information

Firebase (Google)

Privacy Policy →

Purpose: Authentication token management

Data Shared: Authentication tokens and session data

Purpose: Application hosting and deployment

Data Shared: Request logs and performance metrics

Your Privacy Rights

Access & Control

  • View your data: Access all your domain configurations in the dashboard
  • Export data: Download your domain records as JSON
  • Update information: Modify DNS records anytime
  • Delete domains: Remove domains you no longer need

Data Deletion

  • Account deletion: Contact us to delete your account
  • Data removal: We'll remove all personal data within 30 days
  • Domain records: Publicly visible records remain for service integrity
  • Cache expiration: Cached data expires automatically

Cookies & Tracking

We use minimal tracking to provide and improve our service:

EssentialAuthentication Cookies: Required for login and session management
PerformanceCaching: Temporary data storage to improve response times
SecurityRate Limiting: Protection against abuse and spam attempts

We do not use advertising cookies, third-party trackers, or analytics that identify individual users.

Policy Updates

We may update this privacy policy from time to time. When we do:

  • • We'll update the "Last updated" date at the top of this page
  • • For significant changes, we'll notify users via email or dashboard announcement
  • • The updated policy will be effective immediately upon posting
  • • Previous versions will be available in our GitHub repository

Contact Us

Have questions about this privacy policy or how we handle your data? We're here to help:

General Questions

Privacy Concerns

  • • Open a privacy-related issue on GitHub
  • • Tag your issue with "privacy" label
  • • We'll respond within 48 hours

This privacy policy is part of our commitment to transparency. View the source of this page on GitHub.