Control D is a customizable DNS resolver and filtering service operated by a company founded in 2021 in Toronto, Canada, by the founders of Windscribe (CEO Alex Paguis, CTO Mark Ulicki), who spun the DNS platform off from Windscribe specifically because Windscribe's strict no-logging VPN policy conflicted with the need to identify DNS clients for a filtering product. Control D's privacy policy states personal data is primarily processed in-house and not shared with third parties except for necessary subcontractors, legal compliance, or a merger/acquisition, and the company publishes SOC 2 Type II, ISO 27001, and ISO 27701 certifications with downloadable attestation letters. As a DNS resolver, query-level logging and analytics retention are configurable rather than off by default; the same privacy policy also discloses that the company or its 'authorized external service providers' automatically collect technical/analytics data (IP address, browsing surf habits, device type) when users interact with its website and platform. This is a genre-typical business-DNS posture -- closer to a SaaS analytics platform than a privacy-first no-logs tool -- with real, published compliance certifications as its strongest affirmative artifact.
TIMELINE
1 ENTRY
[2026-08-30] · NEW RECEIPTS
7 new sources on file for Control D.
Control D's file gained 7 new sourced claims since its last review.
Control D's Privacy Policy states that to improve its services, it collects anonymized information about how users use the platform -- clicks, features used, time spent on each screen, and other analytical data -- with the legal basis being performance of the contract.
Control D's Analytics feature page states that historical DNS analytics data retention is configurable, with the company offering different retention periods so customers can choose how long past data is kept.
Control D's About page discloses it was founded in 2021 in Toronto, Canada, and names its CEO (Alex Paguis) and CTO (Mark Ulicki), describing the company as a spin-off from Windscribe, a VPN company the same founders started in 2016, created specifically to reconcile Windscribe's no-logging policy with the technical need to identify DNS clients.
Control D's Privacy Policy states personal data is primarily processed by the company itself and is not shared with recipients except where necessary to fulfill obligations to the user, where subcontractors operating the platform need access under contractual safeguards, or for legal/safety reasons.
Control D's Security & Trust Center publishes a completed SOC 2 Type II audit attestation letter for download, alongside separately downloadable ISO 27001 (information security management) and ISO 27701 (privacy information management) certifications.
Control D's Privacy Policy itself states, in the section describing why it collects analytics data, that it maintains compliance with SOC 2, ISO 27001, and ISO 27701 standards -- consistent with the certifications separately published on its Security & Trust Center page.
Control D's Privacy Policy discloses that the company and/or its authorized external service providers automatically collect technical data -- including IP address, prior-URL, browsing habits, browser name, device type, and cookies/temporary files -- when users interact with its website and platform, for statistical and analytical purposes.