Skip to main content
Get started

Privacy Policy

DNSense is a product of Direct Online. This policy sets out what personal data we collect, why we collect it, how long we keep it and the rights you have.

Read our GDPR statement
Legal

Privacy Policy

Last updated: 23 August 2026.

Who we are

The controller for the processing described here is:

What we collect and why

  • Account details: your name, e-mail address and a hashed password. We use these to create and secure your account and to contact you about the service. Legal basis: performance of a contract.
  • DNS provider credentials and API tokens, stored encrypted. We use these to read and change the DNS records you ask us to manage. Legal basis: performance of a contract.
  • The DNS zones and records you manage through DNSense, which is what the service does. Legal basis: performance of a contract.
  • Billing details and payment status, to process payments and meet our tax obligations. Legal basis: contract and legal obligation.
  • Messages you send us via the contact form, e-mail or support chat, to answer your question. Legal basis: our legitimate interest in supporting our users.
  • Server logs: IP address, timestamp, requested URL, browser and operating system. We use these to keep the service available and to detect and investigate abuse. Legal basis: our legitimate interest in security.

We do not sell your data or use it for advertising. We do not profile you, and we take no automated decisions that produce legal effects.

Cookies

We only set cookies that are needed for the site and application to work, such as your session and login cookies. We do not use advertising or third-party tracking cookies, so no cookie consent banner is required.

Who we share data with

We share personal data only with the processors we need to run the service, and only for that purpose:

  • Mollie, for payment processing.
  • Our hosting and e-mail providers, who run the servers and send transactional e-mail.
  • The DNS providers you connect, since we send your DNS changes to the provider you selected.

We may also disclose data where a statutory obligation or a criminal investigation requires it. All processors are bound by a data processing agreement, and personal data is stored within the European Union.

How long we keep data

  • Account and DNS data: for as long as your account exists, and deleted within 30 days of account closure.
  • Invoices and payment records: 7 years, as Dutch tax law requires.
  • Support messages: up to 2 years after the conversation ends.
  • Server logs: up to 90 days.

How we protect data

Provider credentials and API tokens are stored encrypted and are unreadable without our application key. Passwords are stored as a one-way hash. Access to the production database is restricted to a single authorized person, we back up twice daily, and we serve every request over HTTPS with a certificate rated A+ by SSL Labs. More detail is in our GDPR statement.

Your rights

Under the GDPR you can ask us to confirm what we hold about you, get a copy of it, correct it, erase it, restrict or object to its processing, and receive it in a portable format. Where processing rests on your consent, you can withdraw that consent at any time, which does not affect processing that already happened.

To exercise any of these rights, mail [email protected]. We respond within one month. If you are not satisfied, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Providing your data

Account and payment details are required to enter into and perform our contract with you. Without them we cannot provide DNSense. Everything else is voluntary.

Changes

If we change this policy we update the date at the top of this page and, for material changes, notify account holders by e-mail.