DNS privacy

SwearGuard DNS stores your account email, salted password hash, login session, filter settings, linked public IP, and optional DDNS hostname. Your DNS requests are checked against public blocklists and resolved by our service.

We run DNS servers in the United States and South Africa, and every server applies your rules. Setup picks the server that answers your network fastest; you can choose another. Your account and query history are stored on the main server in the United States. Each server keeps a copy of your rules, linked network IP and device address hashes so it can filter. If query history is on, requests answered by the South African server are sent to the main server over an encrypted connection within seconds, then removed from the South African server.

Query history is off by default. If you turn it on in your profile, we store each queried domain, time, DNS type, result, matching rule and public network IP so you can review them. Records are removed after seven days or when the service reaches 100,000 records, whichever comes first. You can clear your history or turn it off at any time; turning it off deletes your records. We do not use query history for advertising.

Plain DNS between your network and our service is unencrypted. Your internet and hosting providers may see connection information. A home router shares one public IP across its devices. Optional device profiles store a device name, independent rules and a hash of a private DNS-over-HTTPS address. Requests using that address are attributed to that device; sharing an address shares its identity. DNS-over-HTTPS encrypts the connection to our service. Removing a device deletes its query history.

To request account deletion or ask about privacy, email support@swearguard.com. See also the general SwearGuard privacy policy.