DWS
Privacy · Effective November 9, 2026
DWS doesn't log your DNS queries or time requests. No accounts, no analytics, no cookies, no ads, and nothing sold or shared.
This policy covers the DWS network services (the dns.dws.rip resolver, and time on ntp.dws.rip and time.dws.rip) and the websites dws.rip, dns.dws.rip and ntp.dws.rip. "We" means DWS Engineering, LLC and Tanishq Dubey, who run them. Skiff and Amidol have their own policies.
| What | Where | For how long |
|---|---|---|
| DNS queries | memory | until overwritten |
| Time requests | memory | until overwritten |
| Totals | counters | no addresses or names |
| Web requests | edge logs | 7 days |
| Your email | mailbox | until you ask |
01What we collect.
As little as the services need to work. We don't build profiles, and we don't sell, rent or share data with anyone. The services collect no personal data from anyone, including children under 13.
02DNS.
The resolver answers your queries and doesn't log them: no query names, no client addresses, nothing written to disk.
To work at all, it holds some state in memory. That's a cache of answers, per-address counters that enforce a rate limit, and a fixed-size buffer of recent queries that dnsdist keeps by default. None of it is written to disk or exported, and new queries overwrite old ones.
Blocked domains are answered on our edge with 0.0.0.0. We don't record which ones you asked for.
To resolve a name we haven't cached, the resolver asks the domain's own servers. They see our address, not yours: we don't pass on your address or subnet (no EDNS Client Subnet), and QNAME minimisation tells each server only the part of the name it needs.
DoH, DoT and DoQ encrypt your queries between you and our edge. Plain DNS on port 53 isn't encrypted, so anyone on the path can read it.
03NTP and Roughtime.
Time requests are answered and not logged. chrony keeps per-address counters in memory to rate limit abusive clients. They aren't written to disk, and new clients overwrite old ones.
NTS key exchange is a TLS handshake on port 4460, and nothing from it is logged. The Roughtime servers record request totals once a minute, with no addresses.
04Statistics.
We count things to run the network: queries, cache hits, blocked answers, time requests, errors. Counts are totals, with no addresses or names attached. They're how we know the blocklist figure on dns.dws.rip and when something's broken.
05These websites.
dws.rip, dns.dws.rip and ntp.dws.rip set no cookies, run no analytics and load nothing from third parties. Fonts and images are served from here.
Our edge proxies log each web request: your IP address, the time, the page asked for and the response. We use those logs to keep the sites running and to stop attacks. They're deleted after 7 days and aren't shared.
06Email.
If you email us, we get your address and whatever you write. We use it to reply and to fix what you reported. We don't add you to a list or share it. Ask and we'll delete it.
07Changes.
If this policy changes, the new version will be posted here with a new effective date. If the services ever start keeping more than this page says, it will say what, why and for how long before that happens.
08Contact.
Questions or requests: admin@dws.rip.