Last updated: July 2026
ns.lol does not collect personal data. There are no accounts, cookies, third-party analytics, or tracking pixels. The web UI loads fonts from Google Fonts, which receives your IP address when the font stylesheet is fetched.
Cloudflare processes requests as our CDN and compute provider. Their standard edge logs (IP, URL, timestamp) are subject to Cloudflare's privacy policy. We do not access, store, or process these logs.
We store an IP-derived counter in a Cloudflare Durable Object for rate limiting. These counters expire automatically and contain no personally identifiable information beyond a hashed IP key.
DNS lookup results are cached in Cloudflare KV for 1–6 hours to improve performance. Cached data is keyed by the submitted domain and contains only publicly observable DNS records — no private information. Propagation results are never cached.
To answer a lookup, the submitted domain is sent to the services that provide the data: public DNS-over-HTTPS resolvers (Cloudflare, Google, Quad9, Quad9 Unfiltered, OpenDNS, NextDNS, DNS.SB, IIJ, AdGuard, Control D, Mullvad, Wikimedia, and CIRA Shield) for resolver checks and as the propagation fallback; for live propagation checks, a Fly.io-hosted probe, which queries public UDP resolvers (Google, Cloudflare, OpenDNS, Control D, CleanBrowsing, CIRA Shield, Level3, Neustar, Verisign, Comodo Secure, Quad9, Quad9 Secondary, AdGuard, dns.watch, Yandex DNS, NextDNS, and DNS.SB); and Team Cymru for ASN enrichment; and yoke.lol via a service binding for email/security enrichment. Only the queried domain is sent — no client information is forwarded.
We keep aggregate counters for service health: lookup totals, endpoint totals, cache hits and misses, errors, and rate-limit events. These counters do not include requested domains, IP addresses, or per-request identifiers.
Questions? hello@ns.lol