This Privacy Policy explains what personal information localnode.app ("we", "us", "our") collects when you use our service, why we collect it, how we use and protect it, and the rights you have over your data. We keep this short and plain - no legalese for its own sake.
localnode.app is a free subdomain and DNS management service. You can reach us at [email protected] for any privacy-related enquiries.
We collect only what is necessary to provide the Service:
| Data | Why we collect it | Required? |
|---|---|---|
| Email address | Account creation, login, email verification, password reset, and service-related notifications | Yes |
| Password (hashed) | Account authentication. We store a bcrypt hash - never your plaintext password | Yes |
| Subdomain names & DNS records | Core service functionality - provisioning and managing DNS via Cloudflare | Yes |
| IP address | Rate limiting login and registration attempts to prevent abuse; Dynamic DNS updates | Automatic |
| Timestamps | Account creation date, last DNS update times - used for inactivity checks and security auditing | Automatic |
| Login attempt counters | Detecting and blocking brute-force login attacks | Automatic |
We do not collect your name, phone number, physical address, payment information, or any other personal data beyond what is listed above. We do not run any third-party analytics or advertising trackers on this site.
We use your data solely to:
We do not sell, rent, or trade your personal data to any third party, ever.
Running the Service requires us to share limited data with the following trusted providers:
| Provider | Purpose | Data shared |
|---|---|---|
| Cloudflare | DNS record hosting and propagation. All DNS records you create are stored in Cloudflare's systems. | Subdomain names, DNS record content (e.g. IP addresses, TXT values) |
| SMTP2GO | Transactional email delivery (verification and password reset emails) | Your email address and the content of the transactional email |
Both providers are used only to deliver the core functionality of the Service. We do not share data with any other parties unless compelled by law. If we receive a valid legal request for your data, we will comply with applicable law and attempt to notify you where legally permitted.
We retain your data for as long as your account is active. When you delete your account:
You can delete your account at any time from the Settings page. Deletion is immediate and irreversible. Backups may retain data for up to 30 days after deletion, after which they are overwritten.
We take reasonable technical measures to protect your data, including:
HttpOnly, Secure, and SameSite=Strict.No system is completely secure. If you discover a security vulnerability, please report it responsibly to [email protected].
We use a single session cookie (ln_sess) to keep you signed in. This cookie:
HttpOnly, Secure, and SameSite=Strict - it cannot be read by JavaScript or sent cross-site.We do not use any advertising, analytics, or tracking cookies. We do not use Google Analytics, Meta Pixel, or any similar service.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any right or make a complaint, email us at [email protected]. We will respond within 30 days.
The Service is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email. Your continued use of the Service after changes are posted constitutes acceptance of the revised Policy.
For any privacy-related questions, requests, or complaints, please contact us at [email protected]. We aim to respond within 30 days.