PRIVACY · UPDATED OCTOBER 6, 2026

Your DNS.
A clear data trail.

DNS Pilot is an independent service developed and operated by Jackson Alan Jesionowski (Jack Jay), the plugin publisher and data controller. This notice covers the hosted endpoint and website.

What the service accesses

After you approve Namecheap sign-in, we receive an account identifier and access and refresh tokens. We use these to list domains, read DNS, prepare changes, and—when enabled—apply changes you authorize. We do not receive your Namecheap password. Domain contact details are not returned to your AI assistant.

What is stored

Authorization tokens are stored encrypted using the OAuth provider’s token-derived encryption. Account change plans contain DNS snapshots and exact changes. Plans expire after ten minutes. Uncertain or partial-write evidence can remain for up to 24 hours so the result can be reconciled. Successful plans are removed after expiry. Account identifiers and rate-limit counters are retained to isolate workspaces.

OAuth grants expire within seven days without a new connection. Expired records may remain in provider backups under the hosting provider’s retention policies. The application does not intentionally record request bodies or access tokens in logs.

Reviewer sandbox

The private review workspace uses a dedicated account and synthetic example.com records. Each sign-in creates an isolated sample workspace and cannot access Namecheap or change public DNS. Its password is verified against a stored hash. Review sessions last one hour; OAuth sandbox access expires within seven days. Public lookup queries still reach Cloudflare DNS and Google Public DNS. Sample workspace state may be retained during review. Recordings contain only sample data and public DNS observations.

Who receives information

Namecheap processes account and DNS requests. Cloudflare hosts the service and stores its encrypted authorization data and change plans. Your AI client receives tool results, including DNS records and previews; its own data policies apply. Public lookup requests send the queried hostname and record type to Cloudflare DNS and Google Public DNS.

Website and support

This website uses no advertising trackers or third-party analytics. Essential temporary cookies bind sign-in and consent to your browser. Hosting providers may process ordinary network metadata for security and delivery. Support is handled through GitHub; information you post in a public issue is public. Never include passwords, tokens, private DNS exports, or identity documents.

Disconnecting and deletion

Remove DNS Pilot from your AI client and revoke its authorization in Namecheap to stop access. Short-lived access may remain valid until the provider expires it. To request removal of retained account metadata, open a support issue without private details; we will arrange an authenticated request before deleting account-specific data. Disconnecting never deletes your actual DNS records.

Questions

See support or the public source repository for the implementation and current release status.