Skip to main content

ndxer is owned and operated by Southax LLC.

Privacy Policy

Version: 2026-10-04

Southax LLC is responsible for your personal data as the controller of account, billing and service-use information described here. "We", "us" and "our" refer to Southax LLC.

What we log per lookup

When a lookup fails, application diagnostic logging records:

Your query text is not included in these application failure log entries. If recording usage fails, diagnostics also include the account id and exception details. These statements describe application lookup diagnostics; infrastructure and security records are described separately. We use diagnostic records to investigate failures and operate the service.

We also keep aggregate usage counts and counts by query type for your account and billing period to apply plan limits. Successful lookups may be retained in your Recent lookups list, and information you choose to save is kept in investigations, as described below.

Retention

Application container logs rotate as they reach configured size limits, so the time they remain available varies with activity. Account security records and backups have separate retention practices; contact us for details about your data.

Your most recent lookups are also kept for your account's own dashboard, so you can return to one without typing it again. The list holds your latest 50 lookups. You can clear that list from the dashboard at any time, and it is deleted with your account.

If you save an investigation, we keep what you saved in it for your account: its name and description, the domains, subdomains, addresses and values in it, and the classes you gave them. It stays until you delete it, and it is deleted with your account.

When you open registration data for a name, we fetch that name's public registry record and keep a copy of it for up to six hours, so that asking for the same name again does not repeat the request. That copy holds whatever the registry publishes, which can include contact details where the registry has not redacted them. It is not stored anywhere else, and it is deleted when it expires.

Account data

We store your email address, a hash of your password (never the password itself), the dates you accepted these policies, and your Stripe customer and subscription ids. Card data never touches ndxer.

We also keep a record of actions that affect an account — creating, revealing or revoking an API key, a plan change, and any suspension or block we apply — together with the IP address and browser user agent the action came from, where it came from a browser at all. That record is what lets us reconstruct a compromised account, so it is append-only and is kept as a security log. Deleting an account removes the account links from these records but does not delete the records themselves, including any recorded IP address, user agent and event details. Copies of data may also remain in backups until those backups are replaced.

Internal request statistics

We keep internal request statistics for public pages and the account dashboard. Records include the page path, time, response status, referring URL when supplied, browser information and language. Requests made while signed in are linked to your account. We do not store visitor IP addresses in these statistics or collect request records for private lookup and investigation routes.

These statistics stay in our application database and are not sent to an external analytics provider. They set no additional cookies. Records are retained for up to one year plus the daily cleanup interval. Account deletion removes the account link from these records; the remaining request metadata expires under the same retention policy. Copies may remain in backups until those backups are replaced.

Cookies

We set only the cookies needed to keep you signed in, protect form submissions and show service notices; Cookies lists each one and what it is for.

Sub-processors

We use service providers to operate ndxer:

We may also disclose information when required by law or when necessary to investigate abuse and protect accounts and the service.

DNS data

Data returned by lookups is derived from publicly resolvable DNS records. Hostname owners may write to contact@ndxer.com; review is promised, removal is not.

Your rights

You may ask us for a copy of your account data, ask us to correct it, or ask us to delete it, subject to legal and operational limits. Write to contact@ndxer.com. Deleting your account deletes your Recent lookups with it.

Contact

Privacy questions go to contact@ndxer.com.