+
modDNS is developed and operated by IVPN Limited. All services we offer are built for privacy. If a choice needs to be made between a practice that deepens a user's privacy and one that would reduce it but accelerate our growth, we will always take the slower, more private option.
-+
Below is a concise and human-readable privacy policy overview for the modDNS service.
+
To operate your modDNS account, we store the following information:
-+
Authentication Credentials: Your registered email address and a hashed password. If you use passkeys, we store the necessary identifiers to authenticate you. If you enable Two-Factor Authentication (2FA), we also store your backup codes for account recovery.
-+
Profile Configuration: All settings associated with your DNS profiles, such as enabled blocklists, custom rules, and other preferences.
-+
Active Sessions: We maintain a record of your active web sessions to improve account security and provide session management features. We do not store IP addresses, device information or other personal identifiers related to sessions. Example of what is stored per session:
{`{
@@ -92,61 +92,61 @@ export default function PrivacyPolicy() {
Do you use cookies or third-party services?
-
+
We use a single cookie solely for the purpose of managing your authenticated session when you are logged into the modDNS website.
-
+
For monitoring aggregate website usage we run our own Umami analytics instance. Umami is a privacy-focused, cookieless solution that tracks page views and user interactions without collecting personally identifiable information. All data remains on our self-hosted infrastructure.
What data don't you log?
-
+
Our goal is zero or minimal data collection. We do not log any customer-related information unless it is absolutely required for the operation of the service. By default, we do not log:
-
+
- DNS queries (e.g., which websites you visit)
- Timestamps of DNS resolutions
- Your IP addresses
- Device information or identifiers
-
+
For more information on what is logged when you optionally enable "Query Logs", see the next section.
What information is logged about DNS activity?
-
+
ModDNS is a privacy-first service: logging of DNS related activity is disabled by default. Beyond this default setting you have complete control over your DNS query logging.
a) Default setting (Query Logs Disabled)
-
+
When query logging is turned off, all queries are processed entirely in memory and are never written to disk. We log no information about your usage of the DNS resolver, with one exception:
-
+
We store a total count of DNS requests processed by your profile. This is a simple counter and contains no specific details about your activity. Example of data stored:
{`"profile_id": "ju8eamnqfn"
"queries": { "total": 244 }`}
b) With Query Logs Enabled
-
+
Query Logs is a modDNS feature that provides a detailed log of all queries to help you monitor and fine-tune your DNS filtering. If you choose to enable query logging, we store data required to provide you with detailed reports on your DNS activity. This is an optional feature that you must explicitly opt-in to, further, you have detailed control over what is logged and for how long.
-
+
The data points logged include:
-
+
- The timestamp of the query
- The requested domain or IP address (e.g., example.com)
- The decision (e.g., Allowed, Blocked) and the trigger for the decision (e.g. entry on enabled blocklist)
- Your client IP address
- Your Device Identifier, if configured
-
+
Example of data stored for a query with all Query Log options enabled and configured:
{`"timestamp": "$date": "2025-09-17T08:15:45.813Z"
@@ -161,73 +161,73 @@ export default function PrivacyPolicy() {
"response_code": "NOERROR",
"dnssec": false
"client_ip": "203.0.113.55"`}
-
+
Within your profile settings, you can independently enable or disable the logging of queried domains and client IP Addresses.
-
+
You also have full control over the data retention period, which can be set from a minimum of 1 hour to a maximum of 1 month. The default retention period is 1 hour. When you change the retention period setting, any existing logs that exceed the new timeframe are immediately deleted from our systems.
-
+
You can permanently delete all stored query logs at any time from your dashboard.
How do you handle Device Identification?
-
+
Device Identification is an optional feature that allows you to distinguish between devices using the same DNS profile. The device identifier you set is only logged if you have Query Logs enabled.
-
+
This feature can be used to identify devices in your logs without needing to log your IP address, offering an additional layer of privacy when using Query Logs.
Can I verify your privacy claims?
-
+
The entire modDNS project is open source. All code is available in public repositories on GitHub for customers to inspect and verify our privacy practices and the implementation of this policy.
What information is retained when I stop using your service?
-
+
If you choose to delete your account via the 'Delete Account' button in your Account settings, all data associated with your account - including your email, profile configurations, and any stored query logs - is deleted immediately.
-
+
Once an account is deleted, no data associated with it can be recovered.
How do you respond to legal requests for data?
-
+
IVPN Limited is registered in Gibraltar. We only respond to requests from recognized government and law enforcement agencies with jurisdiction in Gibraltar. We do not respond to requests from agencies outside of Gibraltar.
-
+
If we receive a binding court order, we can only provide the data we possess.
-
+
If Query Logging is disabled: We have no DNS activity logs to share. We can only be compelled to confirm that an account exists for a specific email address.
-
+
If Query Logging is enabled: We have query logs that you have chosen to store. The extent of this data depends entirely on the logging and retention settings you have configured. If you are concerned about this possibility, we recommend keeping Query Logs disabled or regularly purging your logs.
User Rights
-
+
In accordance with GDPR, reasonable requests for access to your personal data will be honored within 28 days.
-
+
We reserve the right to refuse or charge for requests that are clearly unreasonable or excessive. Any refused request will be met with a timely response explaining the reason for refusal and your right to refer the matter to our supervisory authority, the Gibraltar Regulatory Authority.
Changes to policy
-
+
IVPN Limited reserves the right to change this privacy policy at any time. In such cases, we will take every reasonable step to ensure these changes are brought to your attention.
diff --git a/app/src/pages/legal/TermsOfService.tsx b/app/src/pages/legal/TermsOfService.tsx
index e183e735..f2fa3821 100644
--- a/app/src/pages/legal/TermsOfService.tsx
+++ b/app/src/pages/legal/TermsOfService.tsx
@@ -47,130 +47,167 @@ export default function TermsOfService() {
- Last updated: 23 April 2025
+ Last updated: Mar 15, 2026
1. Introduction
-
- These Terms of Service ("Terms") govern your use of modDNS, a DNS resolver and filtering service operated by IVPN Limited ("we," "us," or "our"). By subscribing to or using our service, you ("you" or "user") agree to abide by these Terms.
+
+ These Terms of Service (“Terms”) outline your use of modDNS, operated by IVPN Limited (“we,” “us,” or “our”). By using our service, you (“you” or “user”) agree to these Terms.
- 2. Acceptance of Terms
-
- By accessing or using our service, you agree to be bound by these Terms and our{" "}
+
2. Definition of Service
+
+ modDNS (the “Service”) is a DNS filtering service that resolves domain name queries based on a user-defined set of rules. The primary function of the Service is to either permit or block DNS resolutions based on the user’s selected blocklists and custom filtering rules.
+
+
+
+
+ 3. Acceptance of Terms
+
+ By accessing or using our service, you agree to these Terms and our{" "}
navigate('/privacy')}
className="text-[var(--tailwind-colors-rdns-600)] hover:text-[var(--tailwind-colors-rdns-700)] cursor-pointer"
>
Privacy Policy
- , which is incorporated by reference. If you do not agree with any part of these Terms, do not use our service.
+ . If you do not agree with any part of these Terms, do not use our service.
- 3. User Responsibilities
-
- You agree to use our service only for lawful purposes and in a manner that does not infringe or restrict any third party's rights or service use. Prohibited activities include, but are not limited to:
-
-
- - Engaging in illegal activities, including criminal or terrorist actions, fraud, identity theft, and money laundering.
- - Attempting to hack, attack, or gain unauthorized access to any computers, networks, accounts, or systems.
- - Transmitting or distributing viruses, worms, trojans, or other malicious software.
- - Sending harassing, defamatory, abusive, threatening, or hateful messages.
- - Sending unsolicited emails, bulk messages, or any form of spam, including commercial advertising.
- - Engaging in phishing or activities that attempt to steal personal information.
- - Distributing or transmitting copyrighted materials without proper authorization.
- - Participating in activities related to child pornography or exploitation.
- - Using stolen or unauthorized payment information, including credit card numbers and online payment accounts.
+ 4. User Responsibilities and Prohibited Uses
+
+ You agree to use our service only for lawful purposes. You agree not to use the Service for any of the following prohibited activities:
+
+
+ - Illegal activities such as criminal or terrorist actions, fraud, identity theft, and money laundering
+ - Hacking, attacking, or gaining unauthorized access to computers, networks, accounts, or systems
+ - Distributing malicious software including viruses, worms, or trojans
+ - Harassment, defamation, abuse, threats, or hate activities
+ - Activities related to child pornography or exploitation
+ - Phishing or identity theft schemes
+ - Distributing copyrighted materials without permission
+
+
+ You also agree that you will not:
+
+
+ - Attack, overwhelm, or attempt to disrupt our DNS servers through denial-of-service attacks or similar means
+ - Generate excessive query loads through bots, scripts, or other automated means
- 4. Account Usage and Security
-
- Your account is for individual use only; sharing your account or login credentials is prohibited. You are responsible for all activities that occur under your account. Notify us immediately of any unauthorized use or security breaches.
+
5. Account Usage and Security
+
+ Your account is for individual use only. You are responsible for all activities that happen under your account, including all DNS queries made through your configured profiles. Notify us immediately of any unauthorized use or security breaches.
- 5. Payment Terms
-
- - All payments must be made using valid and authorized payment methods. Do not use stolen or unauthorized payment information.
- - Fees are due in advance and are non-refundable, except as required by law or specified in our Refund Policy.
- - We reserve the right to change our fees at any time. Advance notice of fee changes will be provided by posting updates on our website and social media communication channels.
-
-
+ 6. Responsibilities and Disclaimers
-
- 6. Service Availability and Modifications
-
- We strive to provide reliable service but do not guarantee uninterrupted availability. We reserve the right to modify, suspend, or discontinue the service (or any part thereof) at any time, with or without notice.
+
Profile Configuration
+
+ You have full control over your DNS profile configuration, including custom allow/deny rules and blocklist selections. You are fully responsible for the consequences of any blocklist settings or custom rules you configure, including any domains you choose to block or allow.
-
- Technical support is provided via email and is limited to issues related to the functionality of the service.
+
+
Blocklist Accuracy
+
+ We are not responsible for the accuracy of third-party blocklists and are not liable for any damages resulting from a domain being incorrectly blocked or allowed. Blocklists are maintained by third parties and may contain errors.
+
+
+ Security Limitations
+
+ The modDNS service is a DNS filtering tool that helps block known threats, but it is not a complete security solution. It does not guarantee website access, internet connectivity, or complete protection against malware, phishing, and other online threats. You may still encounter malicious content through other means or threats not covered by blocklists offered through our service.
+
+
+ Technical Limitations
+
+ We do not guarantee the accuracy of DNS resolution, continuous availability of all DNS protocols (DoH, DoT, DoQ), or uninterrupted service. DNS queries may occasionally fail or return unexpected results due to technical limitations beyond our control.
- 7. Termination and Suspension
-
- We may suspend or terminate your account immediately, without prior notice or liability, upon breach of these Terms. No refunds will be provided if your account is terminated due to a breach of these Terms.
+
7. Intellectual Property & License
+
+ IVPN Limited owns all rights to the modDNS interface, graphics, and logos, except where covered by open source licenses.
+
+
+ We grant you a personal, non-exclusive, non-transferable, revocable license to use the service, in accordance with these Terms.
-
- Upon termination, your right to use the service ceases immediately. Provisions that should survive termination will remain in effect, including ownership provisions, warranty disclaimers, indemnity, and limitations of liability.
+
+ The modDNS project is open source under the GPL-3.0 license. You may review, modify, and distribute the source code available on GitHub in accordance with the applicable open source license terms.
- 8. Changes to Terms
-
- We reserve the right to modify or replace these Terms at any time. Significant changes will be communicated by posting the new Terms on our website and updating the "Effective Date." By continuing to use our service after revisions become effective, you agree to be bound by the revised Terms.
+
8. Service Availability and Termination
+
+ We try to provide reliable service but do not guarantee uninterrupted availability. We reserve the right to modify, suspend, or stop the service at any time, with or without notice.
+
+
+ We may implement rate limiting or temporary suspension of accounts that generate unreasonable and excessive query loads that impact service performance for other users.
+
+
+ We may suspend or terminate your account immediately, without prior notice, if you breach these Terms. When your account is terminated, you lose access to the service immediately. All your account data will be permanently deleted and cannot be recovered.
- 9. Limitation of Liability and Disclaimer of Warranties
-
- The service is provided on an "as is" and "as available" basis, without any warranties or conditions, express or implied. We do not warrant that the service will meet your requirements or that it will be uninterrupted, timely, or error-free.
+
9. Limitation of Liability
+
+ The service is provided on an “as is” and “as available” basis. To the fullest extent permitted by law, we make no express or implied warranties of any kind. This means we don’t promise it will meet your specific needs or work perfectly.
-
- In no event shall we be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, use, goodwill, or other intangible losses.
+
+ We are not liable for any direct, indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or other intangible losses caused by your use of the service.
10. Indemnification
-
- You agree to defend, indemnify, and hold harmless IVPN Limited and its officers, directors, employees, and agents from any claims, damages, losses, liabilities, costs, or expenses arising from:
-
-
- - Your use of and access to the service.
- - Your violation of any term of these Terms.
- - Your violation of any third-party right, including intellectual property or privacy rights.
+
+ You agree to defend, indemnify, and hold harmless IVPN Limited and its officers, directors, employees, and agents from any claims, damages, losses, or expenses related to:
+
+
+ - Your use of the service
+ - Your violation of these Terms
+ - Your violation of any third-party rights
+ - Your custom DNS configuration choices
- 11. Governing Law
-
- These Terms are governed by and construed in accordance with the laws of Gibraltar, without regard to its conflicts of law provisions.
+
11. Changes to Terms
+
+ We reserve the right to modify these Terms at any time. Significant changes will be communicated by posting the new Terms on our website. By continuing to use our service after the changes take effect, you agree to the new Terms.
+
+
+
+
+ 12. Governing Law
+
+ These Terms are governed by and construed in accordance with the laws of Gibraltar.
+
+
+ You agree that any legal dispute related to these Terms or the Service will be handled exclusively by the courts of Gibraltar.
Contact Us
-
+
If you have any questions about these Terms, please contact us at moddns@ivpn.net.
- This document constitutes the entire Terms and Conditions for your use of the modDNS, a DNS resolver and filtering service operated by IVPN Limited.
+ IVPN Limited
Incorporated in Gibraltar
@@ -179,7 +216,7 @@ export default function TermsOfService() {
-