Privacy Policy

Last updated: August 2026

Merkebna is a DNS-based content filter. We route DNS lookups through encrypted DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT) so apps and browsers cannot skip the adult and app blocks. We do not sell data. We do not use browsing history for ads.

No-log DNS policy

• Merkebna does not store browsing history or individual DNS queries in our database.
• NextDNS profiles are provisioned with query logging disabled where the API allows it.
• Dashboard analytics are aggregated counters only (totals blocked/allowed), not URLs or hostnames you visited.
• We do not sell, rent, or trade personal data or DNS data to advertisers or data brokers.

Encrypted DNS (DoH / DoT)

On enrolled devices, lookups use DNS-over-HTTPS or DNS-over-TLS to the filter resolver. That protects DNS from your local network and from apps that would otherwise use plain DNS. Encryption of DNS is not the same as a VPN: we do not tunnel all traffic, only name resolution used for filtering.

Account data we store

• Account information (email, name, hashed password)
• Subscription status and billing identifiers from Stripe, PayPal or Chapa
• Device enrollment metadata (name, platform, NextDNS profile id — not your query log)
• Filter preferences you set (block lists, hour limits)
• Temporary Android backup of photos, contacts and files during device setup (removed after restore or after 14 days)

Your rights (GDPR)

Export your data from Account settings. To delete your account, send a request via Contact; an administrator will remove it. After a confirmed subscription stop, protection stays until the paid end date, then DNS filtering is turned off.

Encryption in transit

The Merkebna website and API use HTTPS. DNS filtering uses DoH or DoT. Payment card data is handled by Stripe, PayPal or Chapa — we do not store full card numbers.

Detailed logging overview →