- No tracking. No cookies, no analytics, no third-party requests. Every asset on this site is served from this domain.
- Server logs, 24 hours. The webserver keeps standard access logs (IP address, time, requested URL) to keep the service running and abuse out — they are deleted automatically after 24 hours.
- Watchlist alerts. If you sign up to have a domain watched, we store exactly two things: the domain and the email address to notify. Nothing else, gone when you unsubscribe.
- Email. If you write to us, we have your address — we use it to reply, that's it.
Privacy
How this site handles data
## i am no fan of complex legal texts — here's the tl;dr
## privacy notice (datenschutzerklärung)
1. Controller
Felix Mertins, Jülicherstraße 209q-s, 52070 Aachen, Germany — felix@mertins.dev (see imprint).
2. Hosting and server log files
This site consists of static files served from a virtual server operated by the controller. When you access it, the webserver processes the data technically required to deliver the page and to protect the service against abuse: IP address, date and time of the request, requested resource, HTTP status code and the user agent sent by your browser.
Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in operating and securing the service. Log files are deleted automatically after 24 hours. No cookies are set; no tracking or analytics tools are used; no data is transferred to third parties.
3. Watchlist alerts
If you sign up to have a domain watched, we store exactly two data points: the domain name to watch and the email address the alerts should go to. We use them for one purpose only — sending you the notifications you requested when that domain's DS records change. Signups are confirmed by double opt-in.
Legal basis: Art. 6 (1) (b) GDPR — providing the service you requested. The record is kept until you unsubscribe (a link is included in every alert, and an email to us works too); it is then deleted.
4. Contact by email
If you email us, we process your address and the content of your message to handle the request (Art. 6 (1) (b) and (f) GDPR). Correspondence is deleted once the matter is settled, unless a legal retention duty applies.
5. Observatory data
The published observatory data (change events and daily aggregates) is derived from public DNS zone data and consists of technical records about domain names — not about visitors of this site. Where a domain name identifies a person, processing rests on Art. 6 (1) (f) GDPR: the legitimate interest in security research and public transparency of the DNS trust chain, over data that the DNS itself makes publicly queryable. Concerns or removal requests: felix@mertins.dev.
6. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
7. Changes
This notice will be updated when the service changes. Version: July 2026.