Privacy Policy

MizpahGuard is a DNS-based parental control service. We take privacy seriously — especially because our service involves children. This policy explains what we collect, how we use it, and what we do not do with it.

Account information

When you create an account we collect your name and email address. Your password is stored as a one-way cryptographic hash — we cannot retrieve it.

DNS query logs

Every DNS query resolved through your network is logged: the domain name requested, whether it was blocked or allowed, and the timestamp. By default, logs are associated with your network, not with individual devices or people. You control how long logs are retained (default: 30 days). You can change the retention window or delete logs at any time from Account Settings.

Named devices (optional)

If you choose to add a named device to your home — for example "Emma's iPad" — and install its profile, the DNS queries that device makes are additionally associated with the name you gave it, so you can see which of your devices looked up which sites. The person using that device is shown, when the profile is installed, a notice that the account holder can see which sites the device looks up. We do not know who is using a device, only the name you gave it, and we only see the domain names the device looks up, never the pages it visits or the content it sends. Device-level entries follow the same retention setting as other logs. Removing a device stops attributing new queries to it; earlier entries stay under its name until they age out or you delete your logs. If you never add a device, nothing is attributed to any device.

Domain metadata

We maintain a shared database of domain risk scores, categories, and descriptions — this information is about the domain, not about you or your household, and is shared across all accounts to improve filtering accuracy for everyone. It's built from several sources: public blocklists, RDAP registration data, and independent threat-intelligence feeds (see "Third-party services" below) tell us whether a domain has a known security reputation. Separately, MizpahGuard analyzes a domain's own public page content — the text and, in some cases, images a domain's homepage actually shows — using AI models to describe what the domain is and classify its content, so descriptions in your dashboard are grounded in the real site rather than a guess from its name alone. That analysis runs against the domain's own public-facing content, never against your household's private browsing history.

Social sign-in

If you choose to sign in with Google, Facebook, or Microsoft, we receive your name and email address from that provider. We do not receive passwords, contacts, or any other account data from those services. The email address is used to create or link your MizpahGuard account; the name is displayed in your account settings. We store a provider-issued identifier (not your social password) to recognize your account on future sign-ins.

Network IP addresses

To route DNS traffic to your account, we store the public IP address of your home network. You manage these IPs from your dashboard.

Payment information

Subscriptions are billed through Stripe. When you enter a card, you do so directly on Stripe's own secure checkout page — MizpahGuard never receives, transmits, or stores your full card number. We receive limited billing details from Stripe (such as subscription status, renewal date, and the card's last four digits, for display in your account settings) so we can manage your subscription.

• To provide DNS filtering for your household
• To show you activity reports and statistics in the dashboard
• To show you which of your named devices made which lookups, if you add devices
• To send you block alerts if you configure notifications
• To process your subscription payment (via Stripe — see below)
• To improve blocklist accuracy across the platform (using aggregated, anonymized signals)

We do not use your DNS query logs for advertising. We do not sell or rent your data to third parties. We do not share your personal information with anyone except as required by law.

DNS query logs are retained for the period you configure (default 30 days). Logs older than your retention setting are deleted automatically. Account information is retained until you delete your account. You can delete your account at any time from Account > Delete Account — this permanently removes your account, networks, rules, and all associated query logs.

MizpahGuard uses the following third-party services:

• Google Sign-In — optional social sign-in (name + email only). See Google's privacy policy.
• Facebook Login — optional social sign-in (name + email only). See Meta's privacy policy.
• Microsoft Sign-In — optional social sign-in (name + email only). See Microsoft's privacy statement.
• Google Gemini — when a domain's own homepage images need AI analysis to classify its content, we may send those publicly-fetched images (never your household's private data) to Google's Gemini API. See Google's privacy policy.
• RDAP / ICANN — to retrieve public domain registration information (registrar, creation date). This is public data.
• ip-api.com — to look up which organization hosts a domain's infrastructure. This is public data about the domain, not about you.
• Stripe — payment processing for subscriptions. Your card details are entered directly on Stripe's own page and never touch MizpahGuard's servers. See Stripe's privacy policy.
• Resend — delivers transactional emails we send you (password resets, email verification, block alerts, account notifications). We do not send marketing email through this or any service.

Domain risk and category data draws on public blocklists (including StevenBlack, Hagezi, BlocklistProject, OISD, and others), independent threat-intelligence feeds (including abuse.ch's ThreatFox and URLhaus, and the stalkerware-indicators project), and the Disconnect.me tracker classification list. These are downloaded periodically; no personal data is sent to these sources.

Text and image analysis of a domain's own public content is performed primarily by AI models we run ourselves on our own infrastructure — that analysis never leaves our control or goes to an outside company. Google Gemini (above) is used as a secondary backend only when needed.

We use TLS for all connections. Passwords are hashed with bcrypt. Access to DNS query logs requires authentication with your account credentials. We do not have the ability to decrypt or view your individual browsing activity — query logs are associated with your network ID, and only you (and anyone you share your account with) can view them.

MizpahGuard is a service for parents, not for children. We do not knowingly collect personal information from children under 13. The DNS query logs generated by your household belong to your account. If you believe a child has created an account directly, contact us at the address below and we will remove it.

• Access: You can view and export your query logs from the dashboard at any time.
• Deletion: You can delete your account and all associated data from Account Settings.
• Correction: You can update your name and email in Account Settings.
• Portability: Query logs can be exported as CSV from the dashboard.

If we make material changes to this policy we will notify you by email and update the effective date above. Continued use of the service after the effective date constitutes acceptance of the updated policy.

Questions about this policy? Email us at [email protected].