Expanded Privacy Policy for Valla DNS

Effective Date: July 14, 2026

Introduction

This Privacy Policy delineates the precise methodologies by which Valla DNS, operated exclusively by Valla Hub (hereinafter referred to as "We," "Us," or "Our"), collects, utilizes, safeguards, and discloses information obtained from users (hereinafter referred to as "You" or "Your") of the Valla DNS service (the "Service"). This policy is designed to provide unequivocal transparency and to establish ironclad protections for Us as the site owners, while outlining Your limited rights and obligations in a straightforward, objective manner. By accessing or utilizing the Service, You unequivocally consent to the terms herein, and any non-compliance shall result in immediate termination of access without recourse.

1. Overview and Scope

Valla DNS functions as a DNS monitoring and alert system, necessitating the collection of minimal, essential data to facilitate propagation insights, alert delivery, and overall service enhancement. This policy applies exclusively to data handled through the Service and does not extend to third-party sites, services, or applications linked from Our platform. We reserve the absolute right to modify this policy at any time, with changes effective immediately upon posting, and Your continued use constitutes binding acceptance. No retroactive claims or liabilities shall arise from such modifications.

To maximize protection for Us as site owners, this policy incorporates comprehensive disclaimers, limitations on data subject rights, and robust security protocols that prioritize operational integrity over expansive user entitlements.

2. Data Collected

We collect only the data indispensable for Service functionality, security, and compliance. Categories include:

Valla DNS has no user accounts, there is nothing to register for, no login, and no payment. We do not ask for your name, email address, or any profile details to use the tools. The one exception is the optional newsletter on our Learning Hub: if you choose to sign up, you voluntarily provide an email address, which we describe below. The categories of data actually involved are:

  • Lookup Telemetry: Technical data from the queries you run, the domain, host or IP you enter, the record/check type (e.g., A, MX, TXT, SSL), and the result. This is logged to keep the Service accurate and to detect abuse, and is retained for about 90 days before automatic deletion.
  • Operational Metadata: Information automatically captured for security and performance, including request timestamps, IP address, and user agent. This enables rate-limiting and abuse detection, and server logs are retained for about 30 days before automatic deletion.
  • Analytics (Google Analytics 4): If, and only if, you allow analytics via our consent banner, we use Google Analytics (measurement ID G-851KS0Q9GL) to understand how the tools are used. When enabled it sets Google's _ga / _ga_* cookies and sends your IP address and user agent to Google as a processor. Analytics is denied by default, we honor the Global Privacy Control (GPC) signal, and declining leaves it off entirely, the tools work the same either way.
  • Product analytics (Microsoft Clarity): Under the same consent banner, and only if you allow analytics, we use Microsoft Clarity (project ID xkyenz8mns) for anonymized, aggregated usage insights (heatmaps and session trends). It loads from clarity.ms, is denied by default, honors the same GPC opt-out, and declining leaves it off entirely.
  • On-device history (localStorage): Your most recent lookups (up to 7, key valla:recent:domains:v1) are stored in your own browser for the "Recent Searches" convenience list. They expire after about 30 days, never leave your device, and clearing your browser storage removes them.

No sensitive personal data (e.g., racial origins, health information, or biometric data) is collected, and any inadvertent submission by You shall be deleted immediately, with no obligation on Us to notify or compensate.

3. How We Use Data

Data utilization is strictly confined to operational necessities, with no deviations permitted. Purposes include:

  • Delivering propagation insights and notifications via email or other channels.
  • Preventing, detecting, and mitigating abuse, including rate limiting, IP blocking, and automated threat responses.
  • Complying with legal obligations, such as responding to subpoenas, court orders, or regulatory inquiries, where We shall cooperate fully without contesting validity to minimize Our exposure.
  • Internal auditing, debugging, and Service improvements, including machine learning model training on anonymized datasets.
  • Aggregating data for statistical reporting, provided it remains de-identified.

We do not sell, rent, or trade your data. Sharing occurs only where legally compelled (for example, a lawful request from authorities) or with the processors that run the Service (our hosting provider and, if you allow analytics, Google). Data is retained on fixed schedules, server logs for about 30 days, lookup results for about 90 days, and saved tool reports for about 30 days, after which it is automatically deleted. None of it is kept permanently.

4. Data Security and Protection Measures

We implement stringent, industry-standard safeguards to protect data integrity, including encryption in transit (TLS 1.3+), access controls, regular vulnerability scans, and segregated storage. However, no system is impervious; thus, We provide the Service on an "as is" basis and disclaim all warranties regarding security breaches. In the event of a breach, notification shall occur only if legally mandated, and Our liability is capped at zero, with You agreeing to indemnify Us against any related claims, losses, or damages.

International data transfers, if any, comply with applicable laws but are conducted at Our sole risk assessment, with no guarantees of equivalent protection levels.

5. Third-Party Disclosures

Data is not shared with third parties except:

  • With service providers (e.g., cloud hosts, email processors) bound by contractual obligations mirroring this policy, where We bear no responsibility for their compliance failures.
  • In response to legal processes, where We may disclose without Your consent or notice to avoid contempt or penalties.
  • During business transactions (e.g., acquisitions), where data assets transfer without restriction.

You acknowledge that third-party links on the Service are uncontrolled by Us, and We assume no liability for their privacy practices.

6. Your Choices and Rights

Your rights are limited to foster Our operational efficiency:

  • Access and Portability: Submit requests to legal@vallahub.com for data copies in a structured format. We respond within 30 days, but reserve the right to deny if burdensome or unverifiable.
  • Correction and Deletion: Requests for rectification or erasure are evaluated case-by-case; security-critical data (e.g., logs) is exempt. Deletion does not extend to backups or archives.
  • Analytics opt-out: Analytics is off until you allow it, and you can decline from the consent banner at any time. The only place we collect an email address is the optional newsletter signup on the Learning Hub. If you submit it, the address is sent to our shared Valla Hub subscription service (signal.vallahub.com) solely to notify you when we publish a new guide, and every email carries an unsubscribe link. If you never sign up, we hold no email address for you. Minimal security and abuse-prevention logging (IP, user agent, queried host) is necessary to operate the Service.
  • Global Privacy Control (GPC): We honor the GPC browser signal as an opt-out, when present, analytics stays disabled automatically. (Legacy "Do Not Track" headers are effectively superseded by GPC.)

No automated decision-making profiling occurs. Complaints may be lodged with supervisory authorities, but You waive any right to pursue Us directly for alleged violations.

7. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect data from minors; any such data is purged upon discovery, with no liability incurred.

8. Governing Law and Dispute Resolution

This policy is governed by the laws of Texas, USA, without regard to conflicts. Disputes shall be resolved exclusively through binding arbitration in Houston, Texas, with You bearing all costs if unsuccessful. Class actions are prohibited.

9. Limitations of Liability and Indemnification

To afford ultimate protection to Us as site owners, You agree that We shall not be liable for any indirect, consequential, punitive, or incidental damages arising from data handling. Total liability is limited to amounts paid by You in the preceding 12 months, or $0 if none. You indemnify and hold Us harmless from all claims, including third-party actions stemming from Your data submissions or Service use.

10. Contact Information

Direct inquiries to legal@vallahub.com. We respond at Our discretion, with no guaranteed timelines beyond legal requirements.

This policy supersedes all prior versions and integrates with Our Terms of Service.