Free DynDNS
GDPR

Privacy policy

Last updated: 7 October 2026, 22:18 CEST

This statement describes which personal data the service bhdns.de and sbdns.de processes. It describes exactly what the software actually does; the information on purposes and retention periods corresponds to the configuration of the service.

1. Controller

Saban Brkic, Kurfürstenstraße 19, 58332 Schwelm, Germany — bhtech2024@gmail.com — as stated in the legal notice.

2. What data is processed

  • Registration and sign-in:e-mail address, password (only as a scrypt hash, never in plain text), time of registration, time of e-mail confirmation, session identifier with timestamp and IP address.
  • DynDNS data:the subdomain chosen by you, the most recently reported IPv4 and IPv6 addresses, time and number of updates.
  • Automatic IP detection:when you create a subdomain, the public address of your current connection is detected automatically. IPv4 and IPv6 addresses can then be taken over as A and AAAA records. This runs exclusively on our own server (bhdns.de): the server reads the address of your connection itself, and the other address family, if any, is asked through the service's own names v4.bhdns.de and v6.bhdns.de (these two names exist in the primary domain only; a host in another domain uses them the same way). No third-party service is involved. The address is used only for this entry.
  • Update log:every request to/nic/update with the subdomain, the IP address of the requester, the result, the reason and the user agent. This log is used for troubleshooting and for preventing abuse.
  • Confirmation codes:six-digit codes for activation and password reset, exclusively as a hash, with an expiry time and failed attempts.
  • E-mail delivery:recipient address, purpose, result and time of every delivery attempt.
  • Abuse reports:reports go to bhtech2024@gmail.com or through the abuse form. We store the reported name, the category, the description, a contact address (required, so we can follow up) and a hashed fingerprint of the reporter's IP address (the address itself is not stored) — in order to review and document the report.
  • Technical server logs:time, requested address, status code and IP address, insofar as the web server logs them.

3. Purposes and legal bases

  • Provision of the service, account, subdomain and update: Art. 6(1)(b) GDPR (contract or pre-contractual measures).
  • Abuse prevention, rate limiting, security of the service: Art. 6(1)(f) GDPR (legitimate interest).
  • Retention of logs for traceability: Art. 6(1)(f) GDPR.

4. Publication in DNS

The subdomain you choose and the associated address records (A and AAAA) are, for technical reasons, publicly resolvable worldwide. This is the purpose of the service. Do not publish any personal data there.

5. Recipients

The service runs on our own servers. A processor (e-mail delivery service) may be used to send e-mails; in that case the recipient address and the content of the message are transmitted. The IP detection when creating a subdomain runs exclusively through our own service, via the namesv4.bhdns.de and v6.bhdns.de ; no third party is used for it. No data is passed on for advertising purposes. No advertising or analytics cookies are set.

6. Retention periods

  • Sessions: 30 days, after which they become invalid.
  • Confirmation codes: after use or expiry, at most a few days.
  • Update log: 90 days, after which it is deleted automatically.
  • E-mail log: 180 days, after which it is deleted automatically.
  • Account and subdomains: until you delete them.

7. Cookies and external content

Exactly one cookie is set: bhdns_sid . It contains a random session identifier, isHttpOnly and SameSite=Lax , and exists only to keep you signed in. It is strictly necessary for the service, is not used for advertising or analysis, and is not shared with third parties. Because it is strictly necessary, so no consent is required for it (§25(2) TDDDG). The banner on the site asks only whether we mayremember that we showed it: if you accept, that one flag is stored in your browser's local storage (not in a cookie); if you reject, nothing is stored and the banner appears again next time. You can change the choice at any time via “Cookie settings” in the footer.

No analytics, advertising or tracking services are used. No external fonts or content delivery networks are loaded: typefaces and all assets come from our own server, so your IP address is never sent to a third party just to display this site.

8. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. You can delete subdomains yourself at any time in the dashboard; the account can be deleted via the operator. You also have the right to lodge a complaint with a supervisory authority.

9. No automated decision-making

No profiling and no automated decision-making with legal effect takes place. Rate limiting is carried out technically and in a traceable manner.

This text, too, is a draft based on the actual data processing and is not legal advice.