No logs as a product. We do not log DNS queries. We do not log DoH or DoT questions. We do not run analytics, ads, or third-party scripts. We do not sell data. We do not build advertising profiles.

GoyDNS is not a recursor. There is no query stream of "what the internet asked for" sitting on disk for us or for anyone else to mine.

What we store

Account token hash (and optional TOTP secret), session cookies, and which zones an account owns. Zone records live on the nameserver so they can be answered. That is hosting data, not an access log.

What we do not store

No email. No phone. No government ID. No DNS query logs. No client IP history for DNS. No DoH access log of names looked up. No marketing lists. The 16-digit token is shown once and is not kept in recoverable form.

Operations

The box has machine journals so it can be run (process crashes, TLS issuance, unit restarts). Those are not a product analytics store, are not sold, and are not a substitute for query logs we refused to collect. Warrant canary: /canary.txt.

Cookies

Clearnet: goydns_sid (HttpOnly) and goydns_csrf. Overlay: host-only, no Secure flag, no HSTS. Session cookies exist so you can manage zones. DNS-over-HTTPS does not set them.

Legal

We will fight legal claims as much as possible. If a demand asks for query logs or client IPs, the truthful answer is that they do not exist. Details: Leo. For terms of use, see Terms.