Privacy Policy

Overview

DNSShift is a native macOS app that manages your Cloudflare account on your behalf. It talks directly to Cloudflare's API — there is no DNSShift server in the middle, and we do not operate any backend that your zone data, DNS records, or Cloudflare API token passes through.

What we store, and where

• Your Cloudflare API token is stored in the macOS Keychain on your Mac, encrypted by the operating system. It is never written to disk in plain text and never transmitted anywhere except directly to Cloudflare's API.
• DNS zone data is cached locally on your Mac, encrypted at rest, to speed up the app between launches. This cache never leaves your device.
• A local, on-device log of DNS changes you make through the app (add/edit/delete) is kept so you can review your own history. This log stays on your Mac.

What we don't do

• We do not run analytics, crash reporting, or tracking SDKs that phone home to us.
• We do not sell, share, or transmit your Cloudflare data to any third party.
• We do not have a account system or login of our own — authentication is entirely between your Mac and Cloudflare, using the API token you provide.

Third-party services

The only third party DNSShift communicates with is Cloudflare, Inc., to fulfill the actions you take in the app (managing DNS, Workers, R2, Tunnels, and Pages on your Cloudflare account). Cloudflare's own privacy policy governs how they handle that data on their end.

Trademarks & affiliation

DNSShift is an independent, third-party application. It is not affiliated with, endorsed by, sponsored by, or in any way officially connected with Cloudflare, Inc., or any of its subsidiaries or affiliates. "Cloudflare" and the Cloudflare logo are trademarks of Cloudflare, Inc. Any reference to Cloudflare on this site or in the app is solely to describe compatibility with Cloudflare's publicly documented API.

Purchase data

DNSShift is currently sold through Gumroad. Your payment is processed entirely by Gumroad, and license verification uses only your license key — we do not receive or store your card details. If DNSShift becomes available through the Mac App Store in the future, purchases made there are processed entirely by Apple instead.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "Last updated" date.

Contact

Questions about this policy? Email [email protected].