Privacy Policy

Draft status

Draft notice: this page is a plain-language draft pending review by the site owner and legal counsel. It is not yet final legal text and should not be relied on as such.

The statements below describe how the service is designed to work. Items marked as to be confirmed need a decision from the site owner before this policy is published as final.

Who operates DNS Tools

DNS Tools is a product of Spectra Technologies India Private Limited (the operator) and is hosted on SpectraCloud (spectracloud.com). The operator's registered address, registration number and tax identifiers will be published on this page once the operator has confirmed them; none are stated here until then.

Who is responsible

The operator of DNS Tools is the data controller for the information described here. The operator's legal name and registered details are to be confirmed by the site owner and will be added before this draft is finalised.

Until then, questions can be sent using the support contact method described on the contact page.

What we collect

We collect only what the service needs to function.

• Domain names and scan results: the domain you enter and the results of the checks run against it. Scan data concerns public DNS, mail server and website configuration.
• Email address: only if you request a PDF report. It is verified before use.
• Report and delivery records: which report was requested, when, and whether delivery succeeded, failed or bounced.
• Consent records: whether you opted in to marketing email, and when.
• Technical data: IP address and request metadata, used for rate limiting, abuse prevention and security logs.
• Cookies and similar storage: a small amount of first-party storage for the site to work, and your analytics consent choice.

Why we use it and our legal basis

We use scan data to run the checks and show results. We use your email address to verify you and deliver the report you asked for; that is needed to provide the service you requested. We use technical data to keep the service secure and available.

Marketing email, if offered, is based on your separate consent. The precise legal bases for your jurisdiction are to be confirmed with legal counsel.

Email addresses and consent

Verifying your address is required before a PDF is generated or sent. Transactional messages, such as verification and report delivery, are not marketing and are sent regardless of marketing choice.

Marketing consent is a separate box that is not pre-ticked. You can withdraw it at any time using the unsubscribe link in any marketing message or by contacting support, and withdrawal does not affect your reports.

Analytics

We use first-party analytics that count events such as scans started, reports requested and emails verified. These events do not contain your email address, email headers, report contents or other personal data in their parameters.

Google Analytics 4 is used only if you consent through the site's consent control and only if the site owner has enabled it. If you decline or do not respond, it does not load. You can change your choice at any time.

Who we share data with

We do not sell personal data. We rely on service providers to operate the service, which may include hosting, an outgoing email service, and payment processors if paid features are switched on. Each is given only what it needs. The list of named providers is to be confirmed by the site owner.

How long we keep it

Retention periods for scan results, email addresses, delivery records and consent records are to be confirmed by the site owner and will be stated here. As a design principle, data is kept only as long as the purpose requires, and expired report links stop working.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, to object to or restrict certain uses, and to withdraw consent. To exercise them, use the support contact method on the contact page. We may need to verify that a request comes from the owner of the email address.

Security

Credentials and secrets are stored encrypted and are not placed in pages, browser storage or logs. The scanning service only contacts public hosts and refuses private and internal address ranges. No system is perfectly secure, and we cannot promise otherwise.

Children

The service is intended for people who manage domains and is not directed at children.

Changes to this policy

When this draft is finalised and when it later changes, the page will show the date of the update. Material changes will be highlighted.

Written by DNS Tools editorial · Last updated 2026-10-09