Privacy Policy
Effective date: July 24, 2026
This privacy policy describes how Wuflestad, LLC handles information when an authorized operator uses the private ORRA DNS Administrator OAuth client.
Information processed
- Cloudflare account identity information shown during authorization.
- Cloudflare zone and DNS record information necessary to perform an approved administrative task.
- Local operational logs, planned changes, verification results, and backups created on the authorized Waypoint device.
Purpose and legal basis
Information is processed solely to authenticate authorized operators, administer Wuflestad, LLC DNS zones, create rollback data, and verify configuration integrity. The client is not offered to the public.
Credential storage
OAuth access and refresh credentials are stored in the authorized operator’s macOS Keychain. The application does not request or store a Cloudflare Global API Key or manually created API token.
Sharing and sale
Wuflestad, LLC does not sell OAuth or DNS-administration data. Information is disclosed only to service providers required to operate the authorized systems, such as Cloudflare, or when required by law.
Retention
OAuth credentials remain until they expire or are revoked. Local backups and audit logs are retained according to Wuflestad, LLC operational and security requirements and may be deleted when no longer needed.
Security
Administrative access is restricted by account membership, OAuth scopes, device identity checks, PKCE, local Keychain storage, change review, backups, and post-change verification.
Contact
Questions may be sent to josh@wuflestad.net.