DNS activity and your privacy
Understand what domain requests can show, who can access them and how retention works.
Domain requests are not page history
DNS activity can show the requested domain, query type, time and filtering outcome when supplied by your workspace resolver. It cannot show every HTTPS page, message, video or password. Apps, advertisements and prefetching also generate requests. A request does not establish that a person deliberately visited a site.
Logging starts off
An authorized owner must accept the disclosure before enabling detailed logging. Recommended retention is 24 hours; the supported maximum is seven days. Choose the shortest appropriate period and tell affected people what is recorded. Traffic outside the configured VPN and DNS path does not appear here.
Access follows your workspace role
Owners and authorized administrators manage workspace activity. Regular members can access only permitted activity for their assigned profiles. Platform support access requires an owner-approved, scoped and expiring grant and is audited. Infrastructure operators retain technical control; this is not a claim that hosted records are inaccessible to them.
Clear and export with care
Owner privacy controls request clearing from the workspace’s upstream DNS service and report pending, confirmed or failed outcomes. Whole-workspace clearing covers query activity and domain-bearing statistics, caches and temporary data. Private exports expire. Raw DNS is excluded from routine backups, default support diagnostics, advertising, external analytics and AI services.