Privacy Policy

This policy explains what personal data MALETUS, obrt za prijevoz, vl. Joze Maleta ("Gow", "we", "us") processes when you use the Gow DNS filtering service and website, why, and what rights you have. It is written to comply with the EU General Data Protection Regulation (GDPR).

1. Summary

• We do not keep DNS query logs. The websites you look up through Gow are not written to disk, not stored in a database and not linked to your account.
• We store only what we need to run your account and subscription: your email address, your subscription status, and the private DNS address we create for you.
• Payments are handled by Stripe. We never see or store your card number.
• We do not sell your data and we do not use it for advertising.

2. Who is responsible

The controller is MALETUS, obrt za prijevoz, vl. Joze Maleta, Podučiji brig 26, Banja, 20344 Komin (Ploče), Croatia (OIB 22984571641, MB 99272679). Contact for privacy matters: maletus1204@gmail.com.

3. DNS queries: our zero-logging commitment

To answer a DNS lookup, our resolver necessarily receives the domain name you ask for and the IP address your connection comes from. This happens in memory, for the moment it takes to answer. Specifically:

• We do not keep DNS query logs. The query log and the statistics features of our DNS software are switched off, and logging is additionally disabled for every customer profile.
• Our web server does not write access logs for DNS requests, and does not write access logs for the website.
• We do not record which domains were blocked, how often, or for whom.
• Your private DNS address contains a random identifier. It is stored only in your account record so we can give it to you and revoke it. It is not recorded alongside your lookups.
• Answers may be held in a short-lived in-memory cache shared by all customers. The cache is keyed by domain, not by person.
• When a domain is not in the cache, our server forwards the lookup to our upstream resolver(s) ([[upstream DNS provider(s) AdGuard forwards to]]). The upstream sees the request coming from our server's IP address, not yours, and we do not pass your IP address on (no EDNS Client Subnet).

Limits you should know about: your internet provider can still see that you connect to our server (but not the domains inside the encrypted connection), and our hosting provider operates the network our server sits on. Like every internet service, we may be compelled by law to cooperate with authorities; because we hold no query history, there is none to hand over.

4. Data we do process

Account

• Email address and authentication data (a password hash if you use a password, or magic-link sign-in tokens). Provided by Supabase Auth.
• Account creation time.

Subscription and billing

• Stripe customer and subscription identifiers, plan, status and renewal date.
• Payment details (card, billing address, invoices) are collected and held by Stripe. We receive only the identifiers and status above.

DNS profile

• For each device you add: the name you give it (for example "Emma's iPhone"), its private client identifier, its DNS-over-HTTPS URL, its status (active, paused or removed), whether it is the parent device on a Family plan, any parental-control choices you save for it or for your whole account (including free-time hours), and the site names you put on your own "always block" and "never block" lists. These are settings you chose, not records of what a device looked up. The site names on your own lists are also kept in the DNS server's settings, linked only to the device's private identifier, so they can take effect.

Emails

• We send transactional emails (welcome and setup details, cancellation confirmation) through Resend. No marketing email is sent without a separate opt-in.

Business inquiries

• If you use our business or partnership forms: your company or name, email, tax/VAT ID (business requests), the configuration you selected, and your message. Used only to reply to you and prepare an offer.

Consent record

• When you create an account with a password, we save the version of the Terms you accepted and the time you accepted them, as proof of our agreement with you.

Security and abuse prevention

• To stop attacks, password guessing and bots, our servers briefly count requests per IP address, in memory, for minutes to hours. Nothing about this is written to disk, except that an IP address we have blocked for abuse is saved, with the reason and the end date, until the block is lifted or expires.
• We do not write web access logs. Application error logs are scrubbed automatically of passwords, keys, tokens, card numbers, email addresses and private DNS addresses before they are written, and are kept in size-capped, rotating files used only for troubleshooting and security.
• If we ever see a security incident that affects your data, we will tell you and the supervisory authority as the law requires.

5. Why we process it (legal bases)

• Contract (Art. 6(1)(b) GDPR): creating your account, providing and securing your DNS profile, billing, and sending service emails.
• Legal obligation (Art. 6(1)(c)): keeping accounting and tax records of payments.
• Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing abuse and fraud (rate limits, blocking abusive IP addresses), proving which Terms you accepted, and answering business inquiries.
• We make no decisions about you by automated means that have legal or similarly significant effects. Blocking an abusive IP address is a security measure, not a decision about a customer, and you can contact us if you think you were blocked by mistake.

6. Who we share data with

We use the following service providers (processors). Each processes data only on our instructions.

• Supabase: database and authentication.
• Stripe: payments and the customer billing portal. Stripe is also an independent controller for its own legal and fraud-prevention duties.
• Resend: sending email.
• Hetzner: server hosting (Hetzner Online GmbH, in the EU (Germany or Finland)).
• Cloudflare (only if and when we switch on the Turnstile human check on our forms): checks that a form is filled in by a person. It may process your IP address and browser details for that purpose.

We do not sell personal data. We disclose data to authorities only where legally required.

7. International transfers

Some providers may process data outside the European Economic Area (for example in the United States). Where they do, the transfer relies on an adequacy decision or the EU Standard Contractual Clauses.

8. How long we keep data

• Account, subscription and DNS profile records: for as long as your account exists. When a subscription ends, your DNS profile is deactivated immediately. You can delete your account yourself at any time from your dashboard: your account, devices and settings are then deleted straight away.
• Invoices and payment records: as long as tax and accounting law requires, even after you delete your account.
• Business inquiries: up to 12 months after our last contact, unless we start a business relationship.
• DNS queries: not stored (see section 3).

9. Your rights

You can request access to your data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests. Email maletus1204@gmail.com; we respond within one month. You may also lodge a complaint with a supervisory authority, for example the Croatian Personal Data Protection Agency (AZOP, azop.hr).

10. Rights by region

Gow serves customers in Europe, the United Kingdom and the United States. In the UK, the UK GDPR gives you the same rights listed above, and you can complain to the Information Commissioner's Office. Residents of some US states have additional rights to access and delete their personal information and to opt out of its sale or sharing. We do not sell personal information and we do not share it for advertising. To exercise any right, email maletus1204@gmail.com.

11. Cookies and similar storage

We use only what is strictly necessary: the sign-in cookie that keeps you logged in (HttpOnly, Secure, expiring after at most 7 days), and two small settings in your browser (your light or dark look, and the plan you picked before signing up). We use no advertising or analytics cookies, so there is no cookie banner to dismiss. Details are on the Cookie notice.

12. Security

We protect personal data with measures that fit the risk, including: encryption in transit (HTTPS, DNS-over-HTTPS and DNS-over-TLS); passwords stored only as salted hashes by our sign-in provider, never in plain text; database access restricted so a customer can only reach their own records; limits on repeated or abusive requests and protection against password guessing; sessions that expire; a fresh login required before sensitive actions; and no DNS query logs. Your private DNS address is shown only to you when you are logged in. Keep it confidential, because anyone who has it can use your profile. No system is perfectly secure. To report a weakness, see Security.

13. Age and children's devices

Gow is for people aged 18 or over. We do not knowingly collect data from children, and we do not create accounts for them. If you, as a parent or guardian, use Gow's parental controls, the settings you save (for example which apps to block on a device) belong to your account. We hold no information about what a child does online, because we keep no query logs.

14. Changes

If we change this policy in a meaningful way, we will update the date above and notify account holders by email. See also our Terms of Service and Legal notice.