Privacy policy for INAL DNS
This is a courtesy translation of the German Datenschutzerklärung. Only the German version is legally binding.
1. Privacy at a glance
In short: INAL DNS does not store queries, IP addresses or requested domain names. Data is processed in memory only for as long as it takes to handle a query. There are no logs, no disclosure to third parties, no cookies and no trackers.
The following information gives an overview of what happens to your personal data when you use INAL DNS or visit this information page. Personal data is any data that can be used to identify you personally.
2. Controller
The controller responsible for data processing at INAL DNS is:
Inal ITOwner: Yunus Emre Inal
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen
Germany
Phone: +49 151 18443941
Email: info@inal-it.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
3. Data processed during use
When your device sends a DNS query to INAL DNS, the following data is technically unavoidable:
- the IP address of your device or internet connection (needed to send the answer back),
- the requested domain name and record type (e.g.
example.com, type A), - the time of the query.
When this information page is accessed, the usual technical details sent by your browser (e.g. browser type and requested file) are transmitted as well. These are not logged either.
4. Purpose of processing
- Answering the DNS query: the domain name is resolved and the answer is sent to your IP address.
- Filtering: the requested domain name is checked against block lists (see section 9).
- Protection against abuse: to protect against overload and attacks, the number of queries per IP address is limited (rate limiting). The counters needed for this are only held briefly in memory and are not stored. For the same reason, access is currently restricted to connections in Germany; for this purpose the IP address is mapped to a country at the moment of the query.
5. Legal basis
Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing a secure, functioning DNS service that is protected against abuse. Your interests are protected as far as possible by not storing anything at all.
6. Storage period
Queries are only processed in memory for as long as it takes to handle them and are not logged. IP addresses and requested domain names are not stored.
The answer cache only holds domain names and their DNS records, without any reference to individual users. The cache does not reveal who requested a domain.
Aggregated statistics (e.g. the total number of queries) are kept in memory only, are not written to disk and are lost on restart.
7. No disclosure to third parties
Your data is not passed on to third parties, sold or used for advertising. INAL DNS resolves names itself, starting at the root servers, and does not forward queries to other public resolvers. The name servers of the requested domains only see the address of INAL DNS, not your IP address. EDNS Client Subnet is not used.
8. Hosting
INAL DNS and this information page are operated by the following provider:
Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (“Hetzner”). The server is located in the Falkenstein data centre in Germany.
Hetzner acts as our processor. We have concluded a data processing agreement (DPA) with Hetzner. For details, see Hetzner's privacy policy at hetzner.com/legal/privacy-policy.
9. Note on filtering
INAL DNS is a filtering resolver. Queries for domains in the categories ads and tracking, telemetry and crypto mining, malware, phishing and scams, adult content, gambling and fake news, as well as domains registered within the last 7 days, are not resolved. The filtering is based on publicly available block lists. Matching happens automatically in memory; no record is kept of who requested which blocked domain. An overview can be found on the home page.
10. This information page
This page sets no cookies and loads nothing from third parties: fonts, images, stylesheets and scripts are hosted on the same server. There are no analytics or tracking tools, no embedded content and no connections to Google, content delivery networks or other providers. The only script serves the copy buttons, the expanding and collapsing of the guides and the language switch. It does not store anything permanently; when switching languages it only keeps a marker for the duration of the browser session (sessionStorage) so that the new page fades in smoothly.
11. Enquiries by email or phone
If you contact us by email or phone, for example to request unblocking or to report abuse, your enquiry including all resulting personal data will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. Processing is based on Art. 6 (1) (f) GDPR.
12. Your rights
Within the scope of the applicable legal provisions, you have the right at any time to
- free information about your stored personal data, its origin and recipients and the purpose of the data processing (Art. 15 GDPR),
- rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR).
Since INAL DNS does not store any query data, we generally hold no data about your use of the resolver that we could provide information about.
Right to object to data collection (Art. 21 GDPR)
If data is processed on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. You can also end the processing at any time by no longer using INAL DNS.
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation.
13. Encryption
INAL DNS offers encrypted access (DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC). We recommend using only these, as unencrypted DNS queries can be read in transit. This information page is also transmitted encrypted via TLS.