ORRA DNS Administrator logo
ORRA OAuth

Privacy Policy

Effective date: July 24, 2026

This privacy policy describes how Wuflestad, LLC handles information when an authorized operator uses the private ORRA DNS Administrator OAuth client.

Information processed

Purpose and legal basis

Information is processed solely to authenticate authorized operators, administer Wuflestad, LLC DNS zones, create rollback data, and verify configuration integrity. The client is not offered to the public.

Credential storage

OAuth access and refresh credentials are stored in the authorized operator’s macOS Keychain. The application does not request or store a Cloudflare Global API Key or manually created API token.

Sharing and sale

Wuflestad, LLC does not sell OAuth or DNS-administration data. Information is disclosed only to service providers required to operate the authorized systems, such as Cloudflare, or when required by law.

Retention

OAuth credentials remain until they expire or are revoked. Local backups and audit logs are retained according to Wuflestad, LLC operational and security requirements and may be deleted when no longer needed.

Security

Administrative access is restricted by account membership, OAuth scopes, device identity checks, PKCE, local Keychain storage, change review, backups, and post-change verification.

Contact

Questions may be sent to josh@wuflestad.net.