Privacy policy
Last updated: 14 October 2026
Klockie (klockie.com) checks the public configuration of websites (DNS, HTTPS, redirects and email settings) and compares DNS setups before a change. We built it to collect as little as possible. This page explains exactly what we process, why, for how long, and how to ask us to delete it.
Who we are. Klockie is run by Joel M., based in the Philippines. Contact: privacy@klockie.com.
The short version
- We don't ask for your name, email or an account to use Check or Migrate.
- We don't use advertising or tracking cookies.
- Our analytics record anonymous IDs and counts only, never the domains you check, your email or your IP address.
- Zone files you compare in Migrate stay in your browser unless you choose to share the result.
- Shared reports expire automatically (30 days by default, 90 at most), and you can delete them at any time.
What we process and why
| What | Why | How long we keep it |
|---|---|---|
| Domain names you check, and the public results of the check (DNS records, HTTP status codes and headers) | To run the check you asked for, and so you can share the result. | The result is kept for up to 24 hours so you can create a share link, then deleted automatically. Domains are never written to our logs or analytics. |
| Zone files you paste or upload in Migrate | To compare your current and new DNS. | The comparison runs in your browser; the files are not sent to us. If you create a share link, the files are sent once so we can recompute the result. We keep only the result, never the files. |
| Shared reports (a result you chose to share) | So the people you send the link to can read it. | 30 days by default (you can choose 7 or 90), then deleted automatically. You can delete one earlier with its private delete link. Reports never contain your email. In Migrate you can hide record values and share findings only. |
| Your IP address | To stop abuse: limiting how many checks or share links one visitor can create per minute. | We turn it into a one-way scrambled code (a hash) for these limits and don't store the address itself. Counters reset within minutes. |
| Usage events (for example "a check was completed with verdict Ready") | To understand which features are useful. | Random scan or report IDs, rule IDs and counts only, never domains, emails, URLs or IP addresses. If your browser sends Global Privacy Control or Do Not Track, we send nothing. Kept for up to 3 months. |
| Technical logs | To find and fix errors. | A scan ID, how long a check took, the verdict and the type of any error (for example "timeout"). Never domains, emails, URLs or query strings. Kept for up to 3 days. |
Our legal basis under the Philippine Data Privacy Act (RA 10173) is our legitimate interest in providing and protecting the service you asked to use, and your choice when you decide to share a report.
What happens when you check a domain
To run a check, Klockie looks up the domain's public DNS records through Cloudflare's DNS resolver (cloudflare-dns.com) and requests the website's homepage over HTTP and HTTPS. The website you check will see a visit from Cloudflare's network identified as "KlockieBot". We only check public addresses: Klockie refuses private and internal addresses.
Cookies
Klockie doesn't set advertising or tracking cookies. Our anti-bot check (Cloudflare Turnstile) may process technical signals to tell people from bots; see Cloudflare's privacy policy. The site may remember small things in your browser's local storage, for example which share links you created, so it can tell your own views apart from your clients'. This never leaves your browser.
Who else processes data
Cloudflare, Inc. hosts Klockie and provides the DNS resolver, storage for shared reports, analytics storage and the anti-bot check (Cloudflare privacy policy). We don't sell or rent data, and we don't share it with advertisers.
Your rights
Under the Philippine Data Privacy Act you can ask to be informed about, access, correct or delete personal data we hold about you, and object to its processing. Because we hold so little, most requests are simple:
- Delete a shared report: open its private delete link, or email us the report link.
- Anything else: email privacy@klockie.com. We answer within 15 days.
You can also complain to the National Privacy Commission.
Security
Share links use random IDs that are practically impossible to guess and are hidden from search engines. Delete links are stored only as one-way hashes. All traffic uses HTTPS. No system is perfectly secure; if we learn of a breach affecting you, we'll tell you and the National Privacy Commission as the law requires.
Children
Klockie is a tool for people who manage websites and isn't directed at children.
Changes
If we add features that collect more (for example a 7-day re-check email or accounts for monitoring), we'll update this page before launching them and change the date at the top.
Best-effort results
Klockie checks are automated and best-effort, based on publicly visible configuration at the time of the scan. Results may be incomplete: records on unlisted subdomains, private settings and provider-specific behaviour may not be visible. Verify important changes with your DNS, hosting and email providers before acting.