Privacy Policy — DomainInspector

This document is a template. Replace every [...] placeholder and have it reviewed (e.g., by legal counsel) before you publish it and link it from App Store Connect.

1. Overview

• DomainInspector ("the App") is a macOS application that helps developers and operators diagnose a domain's infrastructure — DNS, TLS/HTTPS, HTTP, IP/ASN, CDN/load balancing, and basic security configuration.

The App runs entirely on your Mac. It does not require an account, and it does not send any of your data to us. The only network requests the App makes are the diagnostic checks you start, directed at the public services needed to perform those checks (DNS resolvers and the domain's own servers) and, optionally, an IP-geolocation service.

We do not sell, rent, or share personal information. The App contains no advertising and no third-party analytics or tracking SDKs.

2. Information the App Processes

2.1 Domain names you enter

When you run a diagnosis, the domain name you type (for example example.com) is used to perform the checks. To do this, the App contacts:

• *Public DNS-over-HTTPS (DoH) resolvers (such as Cloudflare 1.1.1.1 and Google 8.8.8.8) to resolve DNS records; and
• *The domain's own servers (over TLS/HTTPS on ports 443/80) to inspect certificates, protocol support, and HTTP responses.

This is inherent to the App's function. In the normal course of a network connection these requests reveal the domain name, and — to the destination server — your IP address and TLS Server Name Indication (SNI). We do not log or retain these requests.

2.2 IP geolocation (optional)

If you provide an ipinfo.io API token in Settings, the App queries ipinfo.io with the IP addresses it resolved, in order to show ASN, organization, and geographic location. This step is optional — the App works without it (with lower lookup limits). Your token is stored only on your device (see Section 3.2).

2.3 On-device history and settings

The App keeps a local history of past diagnoses (domain, scores, and result details) and your preferences (interface language and API token). This data lives in:

• ~/Library/Application Support/DomainInspector/history.json — diagnosis history; and
• the App's sandboxed UserDefaults — settings.

All of it stays on your Mac. None of it is transmitted to us or to any analytics service.