Croton ("we," "our," or "us") operates a DNS filtering service that blocks unwanted content at the network level. This Privacy Policy explains what information we collect, why we collect it, and how we handle it.
By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
When you register, we collect:
When you configure the Service, we store:
When your devices use a Croton DNS endpoint, we record limited data about each query. See Section 3 for details.
If you subscribe to a paid plan, billing is handled entirely by Dodopayments. We do not receive or store your card number or other payment credentials. We only store your subscription status and billing dates.
For each DNS query sent to your endpoint, we record:
We do not log the IP address of the device that sent the query in our permanent query logs.
Individual query log entries are automatically and permanently deleted after 30 days. Aggregated statistics (total query counts, top blocked domains, blocks by category) derived from those logs may be retained longer to power the statistics dashboard.
All queries arrive over DNS-over-HTTPS or DNS-over-TLS, meaning the query content is encrypted in transit and not visible to your ISP or network intermediaries.
Our commitment: We do not use your DNS query data for advertising, profiling, or any purpose other than providing and improving the filtering service.
We do not sell or share your personal data with third parties for advertising or marketing purposes. Data is shared only in these limited circumstances:
Queries for domains that are not blocked are forwarded to upstream resolvers (Google and Cloudflare) to obtain DNS answers. These resolvers receive the domain name being queried but not your account information.
Dodopayments processes subscription payments. They receive the information necessary to complete and manage your payment, subject to their own privacy policy.
We may disclose information if required by law, court order, or legitimate request from a government authority.
If Croton is acquired or merged, your information may be transferred to the acquiring entity. We will notify you of any such change via email or a dashboard notice.
Security measures we have in place:
We do not implement encryption at rest for stored account and configuration data. No method of storage or transmission is 100% secure; we cannot guarantee absolute security.
You can review and update your account information at any time from the Account page.
You can permanently delete your account from the Account page. This removes all profiles, configurations, and query logs associated with your account. Some information may be retained as required by applicable law.
Query logs are automatically deleted after 30 days. You cannot currently request early deletion of individual log entries, but the account deletion option removes all logs immediately.
We only send service-related emails (billing, security, policy updates). We do not send marketing emails.
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with their information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice in the dashboard. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Service after a change takes effect constitutes your acceptance of the updated policy.
Questions or concerns about this Privacy Policy? Please visit the Contact page or email us directly at support@getcroton.com.