APIs Changelog My Zones My Domains Sign up Sign in

Data Privacy Policy

Last updated: November 2026

dynv6 only processes the personal data it needs to run the service. We do not use tracking, analytics or advertising.

Controller

Digineo GmbH, Fahrenheitstraße 15, 28359 Bremen, Germany
Email: datenschutz@digineo.de
Data protection officer: Dominik Menke (contact as above)

What we process

For each purpose: which data, on which legal basis, and for how long.

Your account

Data
Email address, password (hashed), passkeys (public key, credential ID, name), sign-in statistics (number of sign-ins, failed attempts, time and IP address of the current and previous sign-in)
Legal basis
Art. 6 (1) (b) GDPR
Retention
Until you delete your account. Unconfirmed accounts are deleted after 14 days.

Zones, domains and keys

Data
Zone and domain names, DNS records, IP addresses you enter or send to our update APIs, SSH keys, API tokens and TSIG keys with their last use, hook settings including the credentials you enter for other providers
Legal basis
Art. 6 (1) (b) GDPR
Retention
Until you delete them or your account

Server logs

Data
IP address, time, request with its parameters, status code, for API requests also your user and zone ID
Legal basis
Art. 6 (1) (f) GDPR: secure operation, troubleshooting
Retention
7 days

Error reports

Data
Error message, affected page, request data (without passwords and keys), recent database queries, browser, IP address, user ID if signed in
Legal basis
Art. 6 (1) (f) GDPR: fixing bugs
Retention
30 days

Abuse prevention

Data
Abuse reports from third parties. Automatic checks of new zones, including repeated requests to the website at the zone's hostname during its first week. If we delete an account for abuse: email address, zone names, IPv4 address, timestamps and, if applicable, a copy of the flagged website. We may also block the email domain.
Legal basis
Art. 6 (1) (f) GDPR: protecting the service and others from abuse
Retention
As long as needed to prevent repeated abuse

Bot protection

Data
When you confirm your email address, Google reCAPTCHA processes your IP address, browser information and your interaction with the page.
Legal basis
Art. 6 (1) (f) GDPR: preventing automated sign-ups
Retention
We do not store it. Google processes it on our behalf.

Contact

Data
Your email address and message when you write to us
Legal basis
Art. 6 (1) (f) GDPR: answering your request
Retention
As long as needed to handle your request

Good to know

Please note:

  • You need an email address to use dynv6. Without it, we cannot create an account.
  • DNS records are public. Anyone can look up the zone names, records and IP addresses you publish.
  • Once a year, we ask you to confirm your email address again. We delete your account if the address then turns out to be invalid, disposable or blocked, or if emails to it bounce permanently at any time.
  • We delete accounts automatically if they show signs of abuse: abuse reports from third parties, IP addresses or email domains of previously banned accounts, suspicious zone names or DNS records, or website content typical for phishing or spam. If you think this happened by mistake, please contact us.

Recipients

We do not sell your data. It is only passed on to:

  • Hetzner Online GmbH hosts the dynv6 servers in Germany and Finland on our behalf.
  • netcup GmbH hosts our email and error reporting servers in Germany on our behalf.
  • Google provides reCAPTCHA on our behalf. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework.
  • Providers you choose: if you set up a hook (e.g. Hurricane Electric Tunnelbroker or another dyndns2 provider), we send your zone's IPv4 address, the hostname or tunnel ID and the credentials you entered to that provider whenever your address changes.

Cookies

dynv6 itself only sets technically required cookies, so we do not ask for consent (§ 25 (2) No. 2 TDDDG):

  • _dynv6_session keeps you signed in and is deleted when you close your browser.
  • remember_user_token is only set if you tick "Remember me" and expires after 2 weeks.

Google reCAPTCHA may set its own cookies on the page where you confirm your email address.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on Art. 6 (1) (f) GDPR (Art. 21). To exercise these rights, email datenschutz@digineo.de.

You can delete your account at any time in your account settings. This also deletes your zones, records and keys.

You can also lodge a complaint with a supervisory authority, for example the data protection authority of Bremen.