Privacy policy

Last updated: 12 September 2026

This service is operated by Kilo Spark LLC, a limited liability company based in the United States.

This service is operated from the United States.

Overview

DNSMint is a hostname registration service. We collect the minimum data necessary to register hostnames and serve DNS answers for them.

We never proxy or carry customer traffic. Connections go directly from clients to your server; we only answer DNS queries. We cannot see your application traffic, and we hold no TLS key unless you ask us to manage a certificate for a hostname.

What we do not do

  • We do not sell your data or use it for advertising.
  • We do not use your registration data or query logs to train models.
  • We do not proxy, terminate, or inspect traffic to your hostnames.
  • We do not intentionally collect sensitive personal data; a hostname registration is an IP address and a subdomain.

What we collect

Account information

When you sign in, we collect your email address. This is used for authentication, account administration, and account-related communications.

Sign-in is by a link we email you, or through Google. With the link, proving you can read the address is the whole check and there is no password to hold. With Google you authenticate with them directly and they tell us your email address; we never see a password, and we send them nothing about you. What Google does with your sign-in is covered by its own privacy policy, not this one.

Registration data

When you register a hostname, we store:

  • The subdomain and the domain it lives on
  • The IP addresses you attach to it, including their update history
  • Record types and TXT record contents you publish (for example, DNS-01 challenge records)
  • Timestamps for creation, renewal, and expiry
  • The API key that performed each action

DNS records you publish through DNSMint are public by design. Anyone who queries the hostname can learn the registered IP address and any other records it serves.

DNS query metadata

Our authoritative nameservers log metadata about the queries they answer: the hostname queried, record type, timestamp, and the network the query came from (typically a resolver, not an end user). We use this for operations and abuse prevention. We do not receive or log the identity of end users behind resolvers.

Usage data

We collect basic usage data to operate, secure, and improve the Service, such as API request counts and service metrics.

Error reports

When something goes wrong in our API, our dashboard, or our nameservers, we record a report so we can fix it. A report contains the error and where in our code it happened, and normally the hostname or IP address involved, because an error is usually not reproducible without knowing which record it concerned. If the error happened in your browser it also includes your browser and operating system version and the page you were on. We do not put API keys, session cookies, or DNS-01 challenge credentials in error reports.

Data retention

Registration data is retained while a hostname is active, and a record of the hostname is kept for as long as we operate the domain it was on.

DNS query metadata is retained for a limited operational period and then deleted or aggregated.

Error reports are retained for 90 days and then deleted.

Some information is retained after an account is deleted, for anti-abuse and accountability purposes and to meet legal obligations. We keep it for as long as those purposes require and no longer.

A private key we hold for a managed certificate is kept while the certificate is valid, so you can fetch it, and is included in your data export. It is destroyed when your account is deleted.

How we use your data

  • To register hostnames and serve DNS answers for them
  • To display your hostnames and their status in the dashboard
  • To send account-related emails (sign-in, billing, and expiry notices)
  • To improve and develop the Service
  • To prevent abuse and enforce our Terms of Service and fair use policy

Data sharing

We do not sell your data. We may share data with:

  • The subprocessors listed below, who process data on our behalf so we can run the Service
  • Professional advisors (for example, legal, accounting) when necessary
  • Law enforcement or regulators when required by law

Subprocessors

These companies process data on our behalf. Each is bound to use it only to provide their service to us. We keep this list current; if we add one, this page changes.

If you are a business customer who needs Article 28 terms, our Data Processing Agreement covers the same list, and sets out the notice you get before we add to it.

Vercel - hosting for the website, dashboard, and API. Requests to the Service, including IP address and user agent.

MongoDB Atlas - the database behind the Service. Account information and registration data.

Hetzner - the servers running our authoritative nameservers. The DNS queries we answer and the metadata described above.

Vultr - servers running our authoritative nameservers. The DNS queries we answer and the metadata described above.

Polar - payment processing, as Merchant of Record. Your email address and payment information.

Amazon Web Services - sending account email. Your email address and the contents of those messages.

Better Stack - error tracking and uptime monitoring. The error reports described above, held in the European Union or the United States.

Cloudflare - website analytics, and the challenge that protects sign-in. Pages you view on our website, and your IP address and browser type when a challenge runs.

Security

We use industry-standard security measures to protect your data, including encryption in transit (HTTPS) and secure infrastructure. However, no system is completely secure, and we cannot guarantee absolute security.

Your rights

You can release your hostnames at any time through the dashboard or the API. To request access to, correction of, or deletion of your account information, contact us at hello@dnsmint.com. Deleting an account removes the credentials issued to you and what identifies you in the Service. For anti-abuse and accountability purposes we retain some information about what was done on an account, including who did it: deleting an account cannot be a way to erase what was done with it. Your data export covers those records, so you can take a copy first. Records of the hostnames that existed remain, with nothing linking them to you. A released subdomain returns to your account and can be minted again.

Children

DNSMint is not directed to children under the age of 13, and we do not knowingly collect personal information from children.

Cookies and analytics

We use cookies to keep you signed in. Those are required for the Service to work and are set whether or not you accept anything.

To measure which pages get used we use Cloudflare Web Analytics, which stores nothing on your device. It sets no cookies, writes nothing to your browser's storage, and does not identify you by your IP address or browser. It records that a page was viewed and where the visit came from. Because there is nothing stored on your device, there is nothing to ask you to agree to, which is why we no longer show a banner about it.

We do not use advertising cookies, we do not track you across other websites, and we do not sell or share what we measure.

Third-party services

Certificates for DNSMint hostnames are issued by ACME certificate authorities you choose, such as Let's Encrypt. Certificate issuance is recorded in public certificate transparency logs, which will include the hostname. We do not generate or hold your private keys unless you explicitly request a managed certificate for a hostname.

International data transfers

We operate from the United States, and most of your information is processed there. Some subprocessors process data elsewhere: error reports are processed by Better Stack in the European Union or the United States, wherever you are.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

Contact

For questions about this Privacy Policy or privacy-related concerns, contact us at hello@dnsmint.com. Legal notices or formal requests may be sent to hello@dnsmint.com. Our handling of disputes is described in the Terms of Service.