Privacy

Last updated 10 October 2026.

StrictDNS answers the address lookups your devices make, so it's in a position to see a lot. This page says plainly what we keep, why, who can see it, and when it's deleted.

Who we are

StrictDNS is run by Ondřej Vereš, under the name Nexgea, in the Czech Republic. He's responsible for your data (the "controller"). Write to support@strictdns.com about anything on this page.

What we store

Your account

You sign in with Apple or Google. We keep your name as your partners see it, your email address, and when you were last active. StrictDNS shares its accounts with our app ScrollBump, so the same account works in both.

Your devices

For each device you add: the name you give it, what kind of device it is, its private DNS address, and when it last used StrictDNS. That last time is how your partners are notified when a device stops filtering.

Every lookup a filtering device makes passes through our servers so it can be answered or blocked. Unless you keep an activity log (below), the sites looked up aren't stored.

What you block, and why

Your chosen categories and apps, and the sites you've added to block or allow.

If you write your intention, how you want to use the internet (asked when you invite a partner, and under Account), we keep it as you wrote it. Your partners see it, and are notified when you change it. It's optional, and you can remove it any time.

Your activity log, if you keep one

With the activity log on, we keep each site a device looked up, with the time, whether it was blocked and by what, and which of our lists the site is on (like Adult or Tracking), plus how many lookups each device made per hour. Not full addresses or page contents: only site names, like example.com. Entries are deleted after 30 days. With the log off, no sites are kept at all.

To show a site's icon in the log, our server asks that site, or DuckDuckGo's icon service, for it. Only the site's name is sent, never anything about you or your devices.

The log is up to you. The StrictDNS apps ask whether to keep it before a device starts filtering. You can change it any time under Protection: Off, Only me, or Me and my partners.

Partners and notifications

Who your partners are, the invitations you send, the alerts sent to you, and how you want to get them (push or email, for which changes, and for which kinds of blocked sites). To send push notifications we keep a token for each of your devices, and whether notifications are turned on there.

When one of your devices is blocked from a site, your partners are notified, whether or not you keep an activity log. The alert names the site only if you share your log with them ("Me and my partners"); otherwise it says what kind of site it was, like "an adult site". You can also choose to get these alerts yourself. Each alert is kept in the recipient's alerts, like any other.

Reports you send

From the activity log you can tell us a site belongs in a category, or was blocked by mistake. We keep the site, what you said about it and your note, and email it to our support inbox with your account's email address, so we can reply.

Subscriptions

If you subscribe, Google handles the payment. We receive whether your subscription is active, through our payments provider RevenueCat, never your card details.

Crash reports and app usage

When a StrictDNS app crashes, it sends a crash report: where in our code it happened, the app and system version, and the kind of device. The apps also send anonymous usage statistics, such as which screens are opened. Both are set up as if you had said "don't track me": no advertising ID, no analytics ID kept on your device, nothing tied to your account, and nothing about the sites you visit.

Why, and on what legal basis

• To provide StrictDNS (your account, filtering, your devices and settings, how you want to use the internet, partners and their alerts, block alerts, the reports you send, subscriptions): this is the service you sign up for, so the basis is our contract with you.
• Your activity log, sharing it with partners, and analytics cookies on our website: only with your consent, which you can take back any time in the same place you gave it.
• Keeping the service safe and working (stopping abuse, fixing faults, crash reports, anonymous app statistics): our legitimate interest in running a reliable service.

Who can see it

• You, always.
• Your partners see what you block, every change you make to it, what you wrote about how you want to use the internet, your devices and whether each is filtering, and are notified when a device is blocked from a site. They see your activity log, and the names of blocked sites, only if you choose "Me and my partners". They never see your devices' DNS addresses.
• No one else. We don't sell your data, show ads, or share it for marketing.

Who runs it for us

These providers process data only on our behalf, to do their part:

• Google Firebase handles sign-in, partners and notifications.
• Apple and Google deliver push notifications to your devices.
• Resend sends alert emails, and the reports you send to our support inbox.
• RevenueCat keeps track of subscriptions.
• Firebase Crashlytics collects crash reports from the apps.
• Google Analytics counts app usage anonymously, and visits to our website (see below).
• Cloudflare provides our hosting and network services.

Some of them are based in the United States, so your data may be processed there. They're covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses, which keep EU data protection in place.

Our website

strictdns.com use Google Analytics to see which pages people visit and how they found us. It only sets cookies if you accept them in the banner; until then Google gets an anonymous page view with no cookie. Nothing from your account, your devices or your DNS lookups is sent to it. You can change your choice any time with "Cookies" at the bottom of every page.

How long we keep it

• Your account, devices, settings and partners: while you use StrictDNS.
• Activity log entries and hourly counts: 30 days.
• Reports you send: until you delete your account; the email in our support inbox until we've dealt with it.
• Crash reports: 90 days.
• A removed device's DNS address stops working at once.

Deleting your account

Use Delete account under Account in the StrictDNS app. Your partnerships end (your partners are notified), your devices stop filtering at once, and your settings (what you wrote about how you want to use the internet included), activity log and reports are deleted. You can also ask us to erase your data at support@strictdns.com.

A subscription isn't cancelled by this: cancel it in Google Play's subscriptions.

Your rights

You can ask us for a copy of your data, to correct it, to erase it, to limit how we use it, or to receive it in a portable format, and you can object to uses based on our legitimate interest. Where we rely on your consent, you can take it back at any time. Write to support@strictdns.com; we answer within a month.

If you think we've handled your data wrongly, you can complain to a data protection authority: in the Czech Republic that's the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz), or the one where you live.

Children

StrictDNS has no age limit: all it does is block. You sign in with an Apple or Google account, which have their own minimum ages. If you're under 16 (or your country's age for this, 15 in the Czech Republic), a parent or guardian needs to agree before you use StrictDNS, in particular before you keep an activity log or share it.

Changes to this page

If we change how we handle your data in a way that matters, we'll tell you in the app or by email before it applies.

Contact

Ondřej Vereš (Nexgea), support@strictdns.com.