Terms of Service & Acceptable Use

Acceptable Use Policy

Using the resolver for any of the following is not allowed. We block the addresses this traffic comes from, automatically and without notice, and a block can be permanent:

Amplification Attacks

Using our resolvers to reflect traffic or launch DDoS attacks against third parties.

Mass Scanning

High-velocity scanning of subdomains, rapid-fire PTR lookups, or network mapping.

Botnet Activity

Command & Control (C2) beacons, malware distribution, or domain generation algorithms.

Spam Operations

Facilitating unsolicited bulk email (UBE), spam campaigns, or fraud.

Fair Use

There is a limit on how much traffic one address can send. A household, a small office, or many people sharing one address behind a carrier's NAT should not reach it in normal use.

An address that sends far more than that is slowed down or blocked for a while. We do not publish the exact numbers, because they would mainly help the traffic the limits exist to stop.

Privacy & Data Handling

What is not kept

No query logs: dnsdist and Unbound log no queries. The live query log exists only in memory.
No browsing history: no history of what you look up is built.
Nothing sold: we do not sell or share data with advertisers, ISPs or data brokers. Uncached names are looked up at Cloudflare and Quad9, without your address.

What is kept, and for how long

Cache: answers are cached in memory by Unbound and expire with their TTL. The cache holds answers, not who asked for them.
Aggregate Metrics: We monitor total query volume and cache hit rates to scale our servers.
Defence records: the defence layers keep source addresses of traffic they act on, for limited periods: at most 30 days for their decision logs, and 7 days for short DNS packet captures, which include the query name. The privacy page lists every record and how long it is kept.

Legal Disclaimer & Limitation of Liability

1. "As Is" and "As Available"

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE". DNSDOH.ART EXPRESSLY DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE.

2. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL DNSDOH.ART, ITS OPERATORS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM (A) YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE SERVICE; (B) ANY CONDUCT OR CONTENT OF ANY THIRD PARTY ON THE SERVICE; OR (C) UNAUTHORIZED ACCESS, USE, OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT.

3. Content Filtering & Blocklists

We block domains associated with ads, trackers, malware and phishing, using four public blocklists named on the infrastructure page. We cannot guarantee that every malicious domain will be blocked or that legitimate domains will never be blocked (false positives). We may change the blocklists at any time.