Privacy policy

Datante (“Datante,” “we,” “our,” or “us”) operates the website datante.com and the associated home-network privacy service. Our service routes your home router’s DNS through ControlD profiles we manage on your behalf to block trackers built into smart-home and IoT devices.

We collect the minimum information needed to operate your account and provide the service:

• Email address — to create your account and send transactional messages (such as payment receipts).
• Subscription status — whether your subscription is active or inactive, and your chosen privacy preset (Light, Balanced, or Strict).
• DNS device ID — a randomly generated identifier used to route your router’s DNS queries to the correct ControlD configuration.
• Stripe customer ID — a reference ID used by our payment processor to manage your subscription. We do not store full payment card details.

We do not collect your name, phone number, home address, or any other personal identifiers beyond what is listed above.

We are explicit about this because it matters:

• DNS query logs — Datante does not log, store, or inspect the DNS queries made by your router or any device on your network. The analytics you see in your dashboard (blocked count, top domains) are fetched in real-time from ControlD using your device ID and are never stored by us.
• Browsing history — We do not track, record, or retain any record of the websites you visit or the domains your devices look up.
• IP addresses — We do not log your IP address for tracking purposes. Standard web server logs that may temporarily capture your IP are not linked to your account and are not retained beyond 30 days.
• Device information — We do not fingerprint your browser or collect information about the devices on your network.

We use the data we collect exclusively to:

• Create and maintain your account.
• Provision and manage your ControlD profile with the privacy rules you selected.
• Process subscription payments and send payment-related emails via Stripe.
• Provide customer support when you contact us.
• Comply with legal obligations.

We do not sell your data, share it with advertisers, or use it for any purpose beyond operating the service.

To provide the service, we share limited data with the following trusted third parties:

• Supabase — hosts our database (email, subscription status, profile IDs). Data is stored in the US and protected by row-level security. See Supabase’s privacy policy.
• Stripe — processes subscription payments. We share your email with Stripe so they can send payment receipts. We do not store your card number. See Stripe’s privacy policy.
• ControlD — provides the DNS resolver infrastructure. Your router’s DNS queries pass through ControlD servers. ControlD’s default configuration does not log queries; we provision your profile with logging disabled. See ControlD’s privacy policy.

We retain your account data (email, subscription status, DNS device ID) for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your account data within 30 days, except where retention is required by law (e.g., invoice records required for tax compliance, which are retained for 7 years).

Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise these rights, email us at privacy@datante.com. We will respond within 30 days.

We use industry-standard security practices including encrypted connections (HTTPS/TLS), row-level security in our database, and separation of service keys. No system is perfectly secure, but we take reasonable measures to protect your data from unauthorized access, alteration, or disclosure.

We may update this policy as the service evolves. Material changes will be announced by email to active subscribers at least 14 days before they take effect. The “Last updated” date at the top of this page always reflects the current version.

Questions about this policy? Reach us at privacy@datante.com.