Privacy policy.

Guardino Technologies LLC is a Wyoming-registered company (file no. 2026-001882554) providing DNS-level filtering and digital-wellness services at guardino.ai. The data controller for the Service is Guardino Technologies LLC, operating from Istanbul, Türkiye.

For privacy matters contact support@guardino.ai. Our registered mailing address is 30 N Gould St, STE R, Sheridan, WY 82801, United States; full entity details are in our Legal Notice.

Account data: your email address and a hashed password, or (if you sign in with Google) your Google OAuth identifier; your name; and your plan tier. Authentication is handled by better-auth.

Billing data: subscription and payment identifiers from Stripe, our payment processor. We do not store your full card number; Stripe processes payments in USD.

DNS query metadata, only if you turn logging on: the domain queried, the response status (allowed / blocked / cached), the category, which of your profiles or devices it came from, and a timestamp. Logging is off by default and a new account stores none of this. We do NOT store the IP address of the device making the query in long-term storage.

Service usage: the device label you assign, the profile attached to it, and aggregate counters (queries today, blocked today).

Operational logs: short-lived server logs for debugging and abuse prevention, retained for 14 days then deleted automatically.

Marketing-site analytics: on our marketing pages we use Microsoft Clarity (see the dedicated section below), which may record interaction events and set cookies.

We do not log full browsing history. DNS gives us domain names, not URLs or page contents.

We do not sell, rent or share your DNS data with advertisers or third-party data brokers, ever.

We do not require your real name. Pseudonyms are welcome.

We do not run advertising trackers, ad cookies or session-recording tools inside the signed-in dashboard.

To run the DNS filtering service you signed up for. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

To bill your subscription via Stripe. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

To detect abuse, prevent attacks on the service and meet plan quotas. Legal basis: our legitimate interests in running a secure, available service (Art. 6(1)(f) GDPR).

To send security alerts and product updates you have explicitly opted in to. Legal basis: your consent (Art. 6(1)(a) GDPR), revocable any time in Settings → Notifications.

To understand and improve our marketing pages via Microsoft Clarity. Legal basis: our legitimate interest in measuring and improving those pages (Art. 6(1)(f) GDPR). We do not run Clarity for visitors in jurisdictions that require prior opt-in consent (see the Microsoft Clarity section).

Our public marketing pages use Microsoft Clarity, an analytics product provided by Microsoft Corporation (tag id wheayvsjkj). Clarity captures how visitors interact with our marketing pages, including session recordings (anonymised cursor movement, clicks, scrolling and page navigation) and aggregated heatmaps, to help us understand usage and improve the pages.

Clarity may set cookies and use similar storage on your browser, and it may combine the behavioural data it collects with information Microsoft holds, as described in Microsoft's own terms. Clarity runs on the marketing site only; it is not loaded inside the authenticated dashboard.

We do not load Clarity for visitors in the EU/EEA, the United Kingdom, Switzerland or Türkiye, where prior opt-in consent would be required and we show no consent banner; everywhere else, Clarity loads only when your browser does not signal Global Privacy Control (GPC) or Do Not Track (DNT), both of which we honour. You can additionally opt out at any time using Microsoft's opt-out at clarity.microsoft.com, or by blocking cookies and scripts for this site in your browser. Microsoft's privacy practices are described at privacy.microsoft.com/privacystatement and the Clarity terms at clarity.microsoft.com/terms.

Strictly necessary: "better-auth.session_token" is the session cookie that keeps you signed in. It is HTTP-only, Secure, SameSite=Lax, and scoped to .guardino.ai so it works across our subdomains. No consent is required for this strictly necessary cookie.

Preference: "NEXT_LOCALE" stores your chosen interface language so we can serve the right localisation.

Analytics: Microsoft Clarity cookies are set on the marketing pages only, under consent where applicable, as described above.

Full details are in our Cookie Policy.

Stripe: payment processing (Stripe, Inc.; privacy at stripe.com/privacy).

Cloudflare: content delivery and DDoS protection (Cloudflare, Inc.).

Hostinger: managed VPS hosting and DNS infrastructure (Hostinger International Ltd.).

Hetzner: server hosting in Germany (Hetzner Online GmbH), running the additional filtering resolvers behind Mind Modes and, on our own server there, the store that holds encrypted log archives.

Neon: managed PostgreSQL database (Neon, Inc.).

Microsoft Clarity: marketing-site analytics (Microsoft Corporation).

Vercel: application hosting (Vercel, Inc.).

We update this list whenever a sub-processor changes; a current description is in our Sub-processors page. Material changes trigger an email notice.

Because Guardino is a United States entity operating from Türkiye, your personal data is processed in the United States and may be processed in the European Union and Türkiye by us and our sub-processors, some of whom operate global infrastructure in the United States.

Where data leaves the EEA, the UK or Türkiye, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or your explicit consent where applicable.

Query logs: by default we keep none. Query logging is off until you turn it on in Settings, and a new account stores no per-query data at all. If you turn it on, the searchable history is 30 days on Free, 90 days on Pro and 1 year on Team, after which those rows are deleted automatically.

Encrypted log archives (optional): if you also enable archives, months that leave the searchable window are sealed instead of deleted, and kept for as long as you choose, up to 24 months. See the next section for how they are encrypted and where they are held.

Aggregate counters: kept for the lifetime of the account so monthly stats and trends stay accurate.

Account data: kept for as long as your account exists, plus 30 days after deletion to handle billing reversals, then permanently erased.

Operational logs: 14 days, then deleted.

You can request immediate deletion at any time: delete your account from Settings or write to support@guardino.ai.

If you enable archives, each closed month of your query logs is encrypted and moved to a store we run ourselves, on our own server in Germany, hosted by Hetzner Online GmbH. We hold the encrypted file; we do not hold anything that can open it.

How that works: your browser generates a key pair when you set an archive passphrase. We store the public half in the clear, which is what lets our monthly job seal a new archive while you are not logged in. We store the private half only in encrypted form, protected by your passphrase and, separately, by a one-time recovery code shown to you at setup. Neither the passphrase nor the recovery code is ever transmitted to us.

The practical consequence, stated plainly: we cannot read your archives, we cannot produce their contents in response to a request from anyone, and we cannot restore them for you. If you lose both your passphrase and your recovery code, the archives become permanently unreadable. There is no reset, because a reset would mean we could open them.

Archives are deleted when they pass the retention period you chose, and when you delete your account. Turning archiving off stops new archives being created; the existing ones remain until they expire or you delete them.

What is inside an archive: the same query metadata described above, plus the profile or device name each query came from as it stood when the archive was sealed. It never contains the IP address of the device that made the query, because we do not store that.

Access and portability: download a copy of the data we hold about you, in machine-readable JSON, from Settings. It covers your account, profiles, devices, custom rules, notification preferences, billing status and recent activity. Live credentials such as resolver tokens are left out of the file so that a copy sitting in your downloads cannot be used against your account; your own token is always visible under Setup. Very large activity histories are capped in the file, which says so and gives the exact totals: write to us for the remainder.

Correction: fix anything inaccurate from the Settings page or by writing to us.

Deletion: request permanent erasure of your account and all linked data.

Restriction & objection: restrict or object to processing, and opt out of marketing emails at any time, instantly.

Where processing is based on consent, you may withdraw it at any time without affecting prior processing. To exercise any right, write to support@guardino.ai; we respond within one month. You also have the right to lodge a complaint with a supervisory authority.

Where required under Article 27 of the EU General Data Protection Regulation, our EU representative will be designated here (to be designated). Until a representative is formally appointed, data-protection enquiries from the EU/EEA may be directed to support@guardino.ai and will be handled directly by the controller.

We do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act, as amended by the CPRA.

California residents have the right to know, delete, correct, and to non-discrimination for exercising their rights. We honour the Global Privacy Control (GPC) browser signal as a valid opt-out of sale/share.

To exercise these rights, contact support@guardino.ai.

If you reside in Türkiye, the Turkish Personal Data Protection Law No. 6698 ("KVKK") applies. Guardino Technologies LLC acts as the data controller (veri sorumlusu) and processes your data on the legal grounds of contract performance and legitimate interest defined in KVKK Articles 5 and 6.

Your KVKK Article 11 rights (to learn whether your data is processed, request information, learn the purpose of processing, request correction, deletion or destruction, and object to automated decisions) apply identically to the rights listed above. To exercise them, write to support@guardino.ai in Turkish or English; we respond within 30 days.

Cross-border transfer: by signing up you acknowledge that your data is transferred to and processed in the United States by Guardino Technologies LLC (Wyoming), and by our sub-processors Stripe, Cloudflare, Hostinger, Hetzner, Neon, Microsoft Clarity and Vercel. We rely on KVKK Article 9 explicit consent for this transfer.

Guardino is intended for adults who manage their own and their family's protection. Accounts are for adults: we do not knowingly let a child under 16 create one, and if you believe a child has created an account, write to us and we will delete it.

Where you create a profile for a child and switch logging on for it, we process that child's DNS query metadata on your instruction, as the parent or guardian, and on your consent. What we hold is described under "What we collect" and follows the same retention as any other profile. It is visible to you as the account holder and to nobody else. You can switch it off at any time, which stops collection, and you can ask us to delete what already exists.

Logging is off by default on every profile, including a child's. We never enable it for you.

When we change this policy materially, we email everyone with an active account at least 14 days in advance, and the "Effective" date above always shows the current version.

Privacy & data protection: support@guardino.ai

Data Protection Officer / KVKK: support@guardino.ai

Security: support@guardino.ai

General: support@guardino.ai

Mailing address: Guardino Technologies LLC, 30 N Gould St, STE R, Sheridan, WY 82801, United States.