Privacy Policy & Zero-Log Guarantee

AmarDNS is committed to absolute privacy. Your DNS queries belong strictly to you.

1. Zero-Log Architecture

We operate under a strict zero-logging architecture:

• No Query IP Logging: DNS query logs are stored strictly in volatile, ephemeral RAM ring buffers and compressed PulseDB WAL files for real-time live diagnostics.
• No User Profiling: We do not build advertising profiles, track browsing habits, or fingerprint individuals.
• No Data Monetization: We never sell, lease, or share resolver telemetry with data brokers, ISPs, or government agencies.
• Encrypted Transports: All DoH, DoT, DoQ, and DoH3 queries are encrypted with TLS 1.3 or QUIC, shielding queries from local network eavesdroppers.

2. Cache & Ephemeral Memory

Cached DNS records in AeroCache (W-TinyLFU) contain only canonical domain-to-IP mappings provided by authoritative nameservers with standard TTL counters. No client identity is attached to cached records.

3. Third-Party Upstream Resolution

When a domain is not present in the local cache, AmarDNS queries privacy-respecting upstream providers (e.g. Mullvad DNS, Quad9, Cloudflare) via encrypted DoH channels. We do not transmit EDNS Client Subnet (ECS) headers, preserving your exact IP location.