Privacy policy

Last updated: August 2026

What we store

Your email address, a password hash, the subdomains and DNS records you create, API token hashes, subscription state from our payment provider and an audit log of account activity. Payments are processed by Creem (merchant of record) — we never see your card details.

Abuse screening

To keep the shared domain safe we periodically fetch the public start page of newly created subdomains and classify it automatically (categories like dev/staging, blog, suspected phishing), plus check names against Google Safe Browsing. We store only the resulting category and risk score — never the page content. This data is used exclusively for abuse moderation, not for sales or profiling.

DNS query data

Our nameservers keep hourly per-subdomain query counters (no client IPs are stored in these statistics) so you can see approximate usage. Short-lived operational logs may contain resolver IPs for rate limiting and debugging.

Your rights

You can export or delete your account data at any time by contacting support@subdy.io. Deleting your account removes your subdomains, records and personal data within 30 days, except where retention is legally required.