Privacy Policy

Last updated: August 22, 2026

This Privacy Policy explains how ScoutDNS ("ScoutDNS," "we," "us," or "our") collects, uses, shares, and protects personal data. It covers personal data we handle as a controller, such as information from visitors to scoutdns.com and from our business, sales, billing, and support activities. For personal data we process on behalf of our customers as a processor (for example, DNS query data handled by the ScoutDNS platform), please also see our GDPR Policy, which describes our processor obligations and our sub-processors.

Data Privacy Framework

ScoutDNS complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. ScoutDNS has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension. ScoutDNS's certification covers non-HR personal data. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Choice. For personal data covered by this Data Privacy Framework section, ScoutDNS offers individuals the opportunity to opt out before their personal data is (i) disclosed to a third party other than an agent performing tasks on our behalf and under our instructions, or (ii) used for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized. ScoutDNS does not sell personal data and does not currently disclose DPF-covered personal data to non-agent third parties. Before making either such disclosure or materially different use, ScoutDNS will provide affected individuals with a clear, conspicuous, and readily available mechanism to opt out. You may exercise this choice by contacting us through our contact page; you may opt out of marketing communications at any time using the unsubscribe link in our emails.

In compliance with the EU-U.S. DPF and the UK Extension, ScoutDNS commits to resolve DPF Principles-related complaints about our collection and use of your personal data. Individuals in the European Union and the United Kingdom with inquiries or complaints regarding our handling of personal data received in reliance on the DPF should first contact ScoutDNS through our contact page.

ScoutDNS has further committed to refer unresolved DPF Principles-related complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

The Federal Trade Commission has jurisdiction over ScoutDNS's compliance with the EU-U.S. DPF and the UK Extension. ScoutDNS is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Under certain conditions, more fully described on the Data Privacy Framework website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

Personal Data We Collect

We collect the following categories of personal data:

Contact and inquiry data that you provide voluntarily, such as your name, email address, company, and the contents of messages you send us through forms, email, chat, or scheduling tools.
Account, subscription, and billing data associated with a ScoutDNS subscription. Payment card and bank details are collected and processed directly by our payment processor, Stripe, and are not stored on our own systems.
Support data, including the metadata and contents of support requests and related correspondence.
Platform and service data that we process on behalf of our customers, which may include DNS query metadata, IP addresses, and device usernames from roaming clients. We handle this data as a processor under our customers' instructions, as described in our GDPR Policy.
Automatically collected data when you visit our website, such as IP address, device and browser metadata, and usage information collected through cookies and analytics tools.

How We Use Personal Data

To respond to your inquiries and provide the information or services you request.
To provide, maintain, secure, and improve the ScoutDNS platform and website.
To manage subscriptions, process payments, and administer our customer relationships.
To send service communications and, where permitted, information about products, services, or changes to this policy. You may opt out of marketing messages at any time.
To detect, prevent, and respond to security incidents, fraud, and abuse.
To comply with our legal obligations.

How We Share Personal Data

We do not sell or rent personal data, and we do not sell or transfer detailed customer use or DNS log data to any party for their own purposes. We share personal data only as needed to operate our business and provide our services, including with the service providers and sub-processors listed in our GDPR Policy, and where required to comply with law. We remain responsible for personal data we share with third parties acting on our behalf.

Onward transfer responsibility. Where we transfer personal data received in reliance on the Data Privacy Framework to a third party acting as our agent, we remain responsible and liable under the DPF Principles if that agent processes the personal data in a manner inconsistent with the Principles, unless we prove that we are not responsible for the event giving rise to the damage.

International Data Transfers and Data Residency

European Union DNS log records are stored at rest within EU infrastructure. United Kingdom DNS log records are stored at rest within UK and EU infrastructure. When those logs are viewed or queried, the relevant records are processed transiently in memory by application servers located in the United States and are not retained by those servers. Ancillary operational data, such as service access logs and error diagnostics, may be processed and retained in the United States.

Where personal data is processed in or transferred to the United States, ScoutDNS relies on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum as the lawful transfer mechanism, and participates in the EU-U.S. Data Privacy Framework and its UK Extension as described in the Data Privacy Framework section above. We retain personal data only as long as necessary for the purposes described in this policy or as required by law.

Disclosure to Public Authorities

We may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Your Choices

You can opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us. You can set your browser to refuse cookies or to alert you when cookies are being sent, although some parts of the website may not function properly without them.

Your Rights and Access

Subject to applicable law, you may request to access, correct, update, or delete the personal data we hold about you, object to or restrict certain processing, and express concerns about our use of your data. To exercise these rights, contact us through our contact page. We will respond within a reasonable timeframe and may need to verify your identity before acting on a request. Where we process personal data on behalf of a customer as a processor, we will refer your request to that customer and assist them as described in our GDPR Policy.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. When personal data is no longer needed, we delete it or de-identify it.

Security

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, and loss. Data submitted through the website is transmitted over encrypted connections (HTTPS/TLS), and access to personal data is limited to personnel who need it to perform their roles. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Bot Protection

We use Cloudflare Turnstile on our website forms to protect against spam and automated bot submissions. Turnstile is a privacy-preserving alternative to traditional CAPTCHAs that verifies visitors are human without tracking them across websites or collecting personal data for advertising purposes. When you interact with our forms, Turnstile may process limited technical information such as your IP address, browser type, and interaction patterns solely to distinguish legitimate users from bots. This data is processed by Cloudflare in accordance with their Privacy Policy.

Cookies and Analytics

We use cookies and similar technologies to operate the website, remember your preferences, and understand how the site is used. We use analytics tools, including Google Analytics and Google Tag Manager, which may collect information such as your IP address, device metadata, and pages visited in pseudonymized or aggregated form. You can control cookies through your browser settings.

Links to Other Sites

Our website may contain links to other sites. We are not responsible for the content or privacy practices of those sites, and we encourage you to review the privacy statements of any site you visit.

Children's Privacy

ScoutDNS provides services to businesses and organizations. Our website and services are not directed to children, and we do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and post the updated policy on this page.

Contact Us

If you have questions about this policy, our privacy practices, or would like to reach our privacy and compliance team, please use our contact page. If you believe we are not abiding by this policy, please contact us so we can address your concern.