Privacy policy
Last updated: 3 November 2026
This policy explains which personal data the Dynamic DNS extension for Plesk (dabbleam-ddns, "the extension")
processes, and which personal data Dabbleam processes when you buy, use or ask for support for it.
Controller for Dabbleam's own processing: Dabbleam SL, Avda. de Andalucía 43, Bajo D, 11007 Cádiz, Spain, tax ID B42827717. For data protection: dpd@dabbleam.com.
1. The extension: your data stays on your server
The extension runs on the Plesk server where it is installed and keeps its data there. Dabbleam never sees that data. The extension contacts Dabbleam for three things only: the check for new versions, the list of revoked licences, and the renewal of the licence (see "What the extension sends to Dabbleam" below). No telemetry, no usage statistics (the only count is that of Free edition installations, and only if the administrator agrees), no host data. Apart from that, the only data that leave the server are the Pro alerts that a user sets up, sent only to the destinations that user chooses.
The operator of the Plesk server (usually the hosting provider or the server's owner) decides how the extension is used and is the controller of the personal data it processes. Dabbleam has no access to that data and is not a processor of it.
What the extension stores, in its own database on that server:
| Data | Purpose | Kept |
|---|---|---|
| Per host: domain, host name, record types, TTL, a hash and a 6-character prefix of the key, creation and update dates, time and IP address of the last update call | Run the service; show the user when their device last called | Until the host is deleted |
| Activity log: date and time, host, action, old and new value (for example, the previous and the new IP address), IP address and user agent of the caller, the Plesk user who made a change in the panel, result | Troubleshooting and security | The retention set by the server administrator (30 days by default, 1 to 3650 days) |
| Failed update calls: IP address and time | Throttle repeated failed attempts | Only the last 10 minutes are used; older entries are purged |
| Allowed networks of a host (Pro): addresses or ranges | Accept updates only from those networks | Until they are changed or the host is deleted |
| Notification settings (Pro): webhook URL and e-mail address chosen by the user, which events to notify | Send the notifications | Until they are changed or the host is deleted |
The published values (the IP addresses of the hosts, TXT values) are written to the domain's DNS zone and are, by the nature of DNS, public.
Notifications (Pro). When a user configures them, the extension sends, for the events chosen (the IP address of a host changes, a host stops calling, a host calls again):
- to the webhook URL the user entered: an HTTPS request with the host name, the event, the time and the old and new IP addresses;
- to the e-mail address the user entered, through the Plesk server's mail system: the same information in an e-mail.
These destinations are chosen by the user, and whoever runs them (the user, or a service the user picks such as a chat or monitoring tool) receives that data under their own terms. Dabbleam does not receive it. The server operator remains the controller, and should tell its users that this data is sent where they configure it.
The data is deleted when the hosts are deleted, when log entries reach the end of their retention, and entirely when the extension is uninstalled. It is part of the server's backups for as long as the server operator keeps those backups.
If you are a user of a hosting provider and want to exercise your rights over this data, contact your hosting provider: they are the controller.
2. What the extension sends to Dabbleam
The licence file (.lic) is checked on the server, offline: it is signed by Dabbleam and the extension verifies the signature itself. The extension connects to dabbleam.com for three things:
| When | Can it be turned off? | What it sends | |
|---|---|---|---|
| 1. Update check | Once a day | Yes; on by default | Free edition: nothing, unless you let us count the installation (below, "Counting Free installations"); it downloads a public file, the same for everyone. Paid licence: the same data as the renewal (row 3), to check the licence and download the copy with its mark |
| 2. Revoked licences list | Once a day, only with a paid licence | No. A yearly licence (valid for more than 45 days) that cannot check the list for 30 days stops working until it can; monthly licences do not need the list | Nothing. It downloads a public list, the same for everyone, signed by Dabbleam, with only fingerprints of revoked licence files |
| 3. Licence renewal | Once a day, from 7 days before the licence expires until the new licence file arrives | Yes; on by default | The server's Plesk licence number, the id of the licence's service in our store, and a SHA-256 fingerprint of the licence file you have now (not the file) |
If your paid licence has not been valid for 14 days in a row, the extension downloads the public Free edition, sending us no data, and installs it, even if you have turned off the update check.
The mark on paid copies. Each paid copy carries your licence's service id, the server's Plesk licence number, the
version and the date it was generated. It is used to know which licence a copy comes from if it turns up outside its
server. The mark is in the copy, on your server; we keep nothing else for generating it. If you download it from your
client area, the download is recorded in the web server's logs like any other visit (point 12 of our general privacy
policy, https://dabbleam.com/privacidad); downloads made by the extension itself are not logged.
Counting Free installations. The first time you open the Free edition of the extension, it asks whether you let us count the installation. Only if you say yes does it create a random number on your server, not derived from any server data, and the daily update check sends us that number and the installed version. For each number we keep only the version and the date of the last check, without the IP address, and we delete it if 90 days pass without seeing it. We use it only to know how many servers use the Free edition and with which version, and we may show those figures, as totals and without any of the numbers, to Plesk. The legal basis is your consent (Art. 6(1)(a)). You can withdraw it whenever you want in Settings > "Count this installation": the number is deleted from your server and is no longer sent; the one we hold disappears after 90 days. With the update check turned off it is never sent. The paid editions do not use it.
Addresses: updates at https://dabbleam.com/dynamic-dns/releases/ (with a paid licence, releases/latest and
releases/download, by POST); revoked licences list (GET or HEAD) at
https://dabbleam.com/dynamic-dns/licence/revoked; renewal (POST) at https://dabbleam.com/dynamic-dns/licence.
In all three, as with any connection, Dabbleam also receives the server's public IP address and a User-Agent that identifies the extension.
- Purpose: to offer updates, to make a licence stop working when it is cancelled with a refund or moved to another server, to deliver the renewed licence file, to know which licence a paid copy comes from if it turns up outside its server, to count Free edition installations if you let us, and to protect the service from abuse.
- Legal basis: the renewal, the update check with a paid licence and the mark, the licence contract (GDPR Art. 6(1)(b)); the mark, also our legitimate interest in protecting the extension (Art. 6(1)(f)). The update check of the Free edition and the revoked licences list, our legitimate interest (Art. 6(1)(f)) in keeping the extension up to date and secure and, for the list, in protecting the licence contract. The installation count, your consent (Art. 6(1)(a)). The abuse limits, our legitimate interest in keeping the service secure.
- What we keep, and for how long:
- for each licence, only the date and the IP address of the last successful check, renewal or update. Each check overwrites the previous one, so there is no history. Deleted 30 days after the licence ends; daily backups of the server keep them for at most 60 more days;
- for the installation count, for each number, the version and the date of the last check, without the IP address. Deleted if 90 days pass without seeing it;
- the fingerprint is checked and discarded; it is never stored. There is no log entry for each call, and the content of the requests is not logged;
- nothing about version downloads, paid or free, or about the revoked licences list is kept. The web server does not log any of the three connections;
- to limit abuse, we accept up to 60 requests per hour from each IP address. The counter (IP address, start of the hour and count) is deleted within a few minutes after that hour is over.
- Who receives it: only Dabbleam. As our processors, a dedicated-server provider in France hosts our server with dabbleam.com and the store, and a separate backup provider in Finland keeps its backups. All of it is in the EU, so there are no transfers outside it. We use no CDN. It is not sold or shared with anyone else. The list of these providers by name is in your client area, and we send it on request.
- Who it concerns: the licence holder or the server operator. A server's IP address is usually not personal data, but it can be, for example on a server run by an individual, so we treat it as such.
- If you do not want these connections: turn off the update check, automatic renewal or both in the
extension's settings. Without the update check, you download new versions yourself: the Free edition from
https://dabbleam.com/dynamic-dns/releases/and paid editions from your client area. Without automatic renewal, you upload each new licence file from your client area or the renewal e-mail. The revoked licences list cannot be turned off while you have a paid licence; without a licence file, the extension never downloads it. The switch to the Free edition after 14 days without a valid licence does not depend on these settings either. - Your rights: access, rectification, erasure, restriction, objection and portability, by writing to dpd@dabbleam.com. You can also complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) or to the authority of your country.
This is the only data the extension sends to Dabbleam.
3. Purchases
Licences are sold by Dabbleam in its own store at dabbleam.com. The data you give us when buying (name, company,
tax ID, address, e-mail, the server's Plesk licence number) and your invoices are processed as our general privacy
policy explains, at https://dabbleam.com/privacidad. The licence file is checked on the server as described in
"What the extension sends to Dabbleam".
4. Support
When you contact support (support@dabbleam.com), Dabbleam processes your name, e-mail address, company, the content of your messages, and whatever you choose to send (for example, Plesk and extension versions, log entries, which may contain IP addresses). We use them only to answer you and to improve the product. Never send us host keys: we will never ask for them.
Legal basis: your request and, for paying customers, the performance of the contract (GDPR Art. 6(1)(b)); our legitimate interest in improving the product (Art. 6(1)(f)). Kept for 24 months after the request is closed, unless the law requires longer.
5. Your rights
You can ask Dabbleam for access to, rectification, erasure, restriction or portability of your personal data, and object to its processing, by writing to dpd@dabbleam.com. You can also complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) or to the authority of your country.
6. Changes
We will publish any change on this page, with its date.