Privacy Policy

1. Introduction

Web Filtering Service ("we", "our", "us") is operated by Alpha Quantum, Franz-Joseph-Str. 11, 80801 Munich, Germany. This Privacy Policy describes how we process information when you visit our website, create an account, or use our DNS filtering, domain categorization and content classification services.

2. Information We Collect

Account Information

When you register, we collect your name, work email address, company name, billing address and password hash.

DNS Query Metadata

When your network resolvers forward queries to our filtering infrastructure, we process:

• The fully qualified domain name being resolved
• The source public IP address of the resolver
• Query type, timestamp and response action (allow / block / redirect)
• The policy ID that matched the request

We do not collect or retain the content of any web traffic that follows DNS resolution.

Service Usage & Telemetry

Standard server logs (request latency, browser user-agent, referrer), usage analytics for our dashboards, and billing events.

3. How We Use Information

• Operating the DNS filtering service and enforcing the policies you configure
• Generating aggregate content classification and category signals that improve detection for all customers
• Providing reporting and analytics inside your dashboard
• Billing, fraud prevention and customer support
• Complying with legal obligations and enforcing our Terms of Service

4. Legal Basis (GDPR)

For customers and visitors in the European Economic Area and the United Kingdom, we process personal data on the basis of (a) contract performance, (b) our legitimate interest in operating a secure filtering service, (c) legal obligation, and (d) consent where explicitly requested.

5. Data Retention

• DNS query logs: retained for 30 days by default, configurable down to 24 hours on Enterprise plans.
• Aggregated category and content risk statistics: retained indefinitely in non-identifying form.
• Account & billing records: retained for the duration of the contract plus any period required by tax and accounting law.

6. Sharing of Information

We do not sell personal data. We share information only with:

• Sub-processors that run parts of our infrastructure (cloud hosting, email delivery, billing) under written data processing agreements
• Authorities where we are legally compelled to respond to a valid legal request
• Professional advisors under duties of confidentiality

7. International Transfers

Our primary infrastructure is located in the European Union. Where data is transferred outside the EU/EEA we rely on Standard Contractual Clauses and equivalent safeguards.

8. Your Rights

Depending on your jurisdiction you have the right to access, rectify, erase, restrict, object to or port your personal data, and to lodge a complaint with a supervisory authority. Contact [email protected] to exercise these rights.

9. Security

We protect the service with encryption in transit (TLS 1.2+), encryption at rest, strict access controls, SOC 2 aligned operational procedures and regular penetration testing.

10. Cookies

We use a minimal set of essential cookies required to keep you authenticated in the dashboard and to remember preferences. We use privacy-friendly analytics that do not build cross-site profiles.

11. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes are communicated by email or by a prominent dashboard notice at least 30 days before they take effect.

12. Contact