Legal
Privacy policy.
Effective 2026-05-22
Who we are
Guardino Technologies LLC ('Guardino', 'we', 'us') is a Wyoming-registered company providing DNS-level filtering and digital wellness services at guardino.ai.
Our registered file ID is 2026-001882554. The data controller for this service is Guardino Technologies LLC.
What we collect
Account data: email address, hashed password (or third-party OAuth identifier), name, plan, and billing identifiers from Stripe.
DNS query metadata: domain queried, response status (allowed / blocked / cached), category, and timestamp. We do NOT store the IP address of the device making the query in long-term storage.
Service usage: the device label you assign, the profile attached to it, and aggregate counters (queries today, blocked today).
Operational logs: short-lived server logs for debugging and abuse prevention. Retained for 14 days then deleted automatically.
What we do not collect
We do not log full browsing history. DNS gives us domain names, not URLs or page contents.
We do not sell, rent, or share your DNS data with advertisers or third-party data brokers — ever.
We do not require your real name. Pseudonyms are welcome.
Why we process this data
To run the DNS filtering service you signed up for (legal basis: contract).
To bill your subscription via Stripe (legal basis: contract).
To detect abuse, prevent attacks on the service, and meet plan quotas (legal basis: legitimate interest).
To send security alerts and product updates you have explicitly opted in to (legal basis: consent — revocable any time in Settings → Notifications).
Retention
Query logs: stored for 30 days by default so you can review activity. You can shorten this in Settings or request immediate deletion.
Aggregate counters: kept for the lifetime of the account so monthly stats and trends remain accurate.
Account data: kept for as long as your account exists, plus 30 days after deletion to handle billing reversals, then permanently erased.
Operational logs: 14 days, then deleted.
Your rights
Access — request a copy of all data we hold about you, in machine-readable JSON.
Correction — fix anything inaccurate from the Settings page or by writing to us.
Deletion — request permanent erasure of your account and all linked data.
Portability — export your custom rules, profiles, and notification preferences.
Objection — opt out of marketing emails at any time, instantly.
To exercise any right, write to [email protected]. We respond within 30 days.
Sub-processors
Stripe (payment processing) — stripe.com — privacy at stripe.com/privacy.
Cloudflare (CDN, DDoS protection) — cloudflare.com.
Hostinger (managed VPS hosting) — hostinger.com.
We update this list whenever a sub-processor changes. Material changes trigger an email notice.
Cookies
We use a single session cookie ('better-auth.session_token') strictly to keep you signed in. It is HTTP-only, Secure, and SameSite=Lax.
We do not use analytics cookies, ad cookies, or third-party tracking pixels on the dashboard.
Children
Guardino is intended for adults who manage their own and their family's protection. We do not knowingly collect data from children under 16. If you believe a child has created an account, write to us and we will delete it.
Turkish users (KVKK)
If you reside in Turkey, the Turkish Personal Data Protection Law (KVKK No. 6698) applies to your relationship with us. Guardino Technologies LLC acts as the data controller (veri sorumlusu) and processes your data on the legal grounds of contract performance and legitimate interest as defined in KVKK Articles 5 and 6.
Your KVKK Article 11 rights — to learn whether your data is processed, request information, learn the purpose of processing, request correction, deletion, or destruction, and object to automated decisions — apply identically to the rights listed above. To exercise them, write to [email protected] in Turkish or English; we respond within 30 days.
Cross-border transfer: by signing up you acknowledge that your data is transferred to and processed in the United States by Guardino Technologies LLC (Wyoming), and by our sub-processors Stripe, Cloudflare, and Hostinger. We rely on KVKK Article 9 explicit consent for this transfer.
Changes
When we change this policy materially, we email everyone with an active account at least 14 days in advance.
Last updated: 2026-05-22.
Contact
Privacy: [email protected]
Security: [email protected]
General: [email protected]
Mailing: Guardino Technologies LLC, Wyoming, USA