Your Privacy
Stay organized with collections
Save and categorize content based on your preferences.
This document provides important information about the data that we collect
when you use Google Public DNS, how long we store it, and how we use it. You
can also read our Terms of Service.
Our Commitment
We take your privacy very seriously. Google Public DNS adheres to the
Google Privacy Policy. Moreover, Google does not use any personal
information collected through the Public DNS service to target ads.
We do not correlate or associate personal information in Google Public DNS
logs with your information from use of any other Google service except for
addressing security and abuse.
The information that we collect about your DNS queries is stored in two types
of logs, each detailed below:
Temporary DNS Logs
Temporary logs are the only logs that store both your IP address and your DNS
query. Specifically, the temporary logs include:
- the IP address of your device sending the DNS query
- the technical information collected for Permanent Logs (see below)
- for DNS-over-HTTPS (DoH): the Content-Type and Accept HTTP headers
These logs are subject to our deletion processes within 24-48 hours. They are
only used for the following reasons:
- to identify and mitigate security threats or activity that we deem abusive
or otherwise malicious,
- to fix, maintain, and improve Google DNS services, and
- to generate aggregate non-personally identifiable DNS usage summaries.
To address security and abuse issues, we may retain information from the
temporary logs for longer than 48 hours, in each case solely for the limited
purpose of resolving such issues.
Permanent DNS Logs
The permanent logs are a sampling of the temporary logs where your IP address
is removed and replaced by a city or region-level location. Thus, the
permanent logs contain no personal information about you. The following
information is logged in the permanent logs:
- Requested domain name
- Request type (
A
, AAAA
, NS
, MX
, TXT
, etc.)
- Request Size
- Transport protocol (
TCP
, UDP
, TLS
, or HTTPS
)
- Client's autonomous system number
- User's geolocation: country, region, and city (no more specific than 1 km²
and 1000 users)
- DNS Response code
- Google DNS server information
- Timestamp
- Processing time
- Response DNS flags (including
AD
, CD
, DO
, RD
, and TC
)
- Response size
- EDNS version
- EDNS option
- EDNS Client Subnet (ECS) (IP protocol and prefix length -- excluding the
client IP address)
- For DNS-over-HTTPS (DoH):
- Version string corresponding to HTTP path (
/dns-query
or /resolve
)
- Response HTTP encoding, such as
application/dns-message
or json
Previous Versions
You can see all past versions of this policy.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-09-03 UTC.
[null,null,["Last updated 2024-09-03 UTC."],[[["\u003cp\u003eGoogle Public DNS follows the Google Privacy Policy and does not use personal data for ad targeting.\u003c/p\u003e\n"],["\u003cp\u003eTwo types of logs are kept: temporary logs containing IP addresses and query details stored for 24-48 hours, and permanent logs with anonymized location data for aggregate analysis.\u003c/p\u003e\n"],["\u003cp\u003eTemporary logs are used for security, service improvement, and generating non-personally identifiable usage summaries.\u003c/p\u003e\n"],["\u003cp\u003ePermanent logs store aggregated, anonymized data like domain names, request types, geolocation (city or region level), and response codes for statistical analysis.\u003c/p\u003e\n"],["\u003cp\u003eGoogle may retain temporary log information longer than 48 hours solely for addressing security and abuse issues.\u003c/p\u003e\n"]]],["Google Public DNS collects data in temporary and permanent logs. Temporary logs, including IP addresses and query details, are deleted within 24-48 hours and used for security, service improvement, and usage summaries. Permanent logs sample temporary logs, removing IP addresses and replacing them with city-level location data, and log DNS request and response characteristics, but no personal information. Google does not link data from the logs with other google services for advertising purposes. Both types of logs are retained to resolve security and abuse issues.\n"],null,["# Your Privacy\n\nThis document provides important information about the data that we collect\nwhen you use Google Public DNS, how long we store it, and how we use it. You\ncan also read our [Terms of Service](/speed/public-dns/terms).\n\nOur Commitment\n--------------\n\nWe take your privacy very seriously. Google Public DNS adheres to the\n[Google Privacy Policy](https://policies.google.com/privacy). Moreover, Google does not use any personal\ninformation collected through the Public DNS service to target ads.\n\nWe do not correlate or associate personal information in Google Public DNS\nlogs with your information from use of any other Google service except for\naddressing security and abuse.\n\nInformation that we collect\n---------------------------\n\nThe information that we collect about your DNS queries is stored in two types\nof logs, each detailed below:\n\n- [Temporary DNS Logs](#temporary-dns-logs)\n- [Permanent DNS Logs](#permanent-dns-logs)\n\n### Temporary DNS Logs\n\nTemporary logs are the only logs that store both your IP address and your DNS\nquery. Specifically, the temporary logs include:\n\n- the IP address of your device sending the DNS query\n- the technical information collected for Permanent Logs (see below)\n- for DNS-over-HTTPS (DoH): the Content-Type and Accept HTTP headers\n\nThese logs are subject to our deletion processes within 24-48 hours. They are\nonly used for the following reasons:\n\n- to identify and mitigate security threats or activity that we deem abusive or otherwise malicious,\n- to fix, maintain, and improve Google DNS services, and\n- to generate aggregate non-personally identifiable DNS usage summaries.\n\nTo address security and abuse issues, we may retain information from the\ntemporary logs for longer than 48 hours, in each case solely for the limited\npurpose of resolving such issues.\n\n### Permanent DNS Logs\n\nThe permanent logs are a sampling of the temporary logs where your IP address\nis removed and replaced by a city or region-level location. Thus, the\npermanent logs contain no personal information about you. The following\ninformation is logged in the permanent logs:\n\n- Requested domain name\n- Request type (`A` , `AAAA` , `NS`, `MX`, `TXT`, etc.)\n- Request Size\n- Transport protocol (`TCP`, `UDP`, `TLS`, or `HTTPS`)\n- Client's autonomous system number\n- User's geolocation: country, region, and city (no more specific than 1 km² and 1000 users)\n- DNS Response code\n- Google DNS server information\n- Timestamp\n- Processing time\n- Response DNS flags (including `AD`, `CD`, `DO`, `RD`, and `TC`)\n- Response size\n- EDNS version\n- EDNS option\n- EDNS Client Subnet (ECS) (IP protocol and prefix length -- excluding the client IP address)\n- For DNS-over-HTTPS (DoH):\n - Version string corresponding to HTTP path (`/dns-query` or `/resolve`)\n - Response HTTP encoding, such as `application/dns-message` or `json`\n\nPrevious Versions\n-----------------\n\nYou can see [all past versions](/speed/public-dns/archive/privacy-changes) of this policy."]]