Warda-DNS Warda: from ward — to protect, guardian
v0.9.10
Menu

Terms of use

The rules for using Warda, in plain words: what you can expect from it, what it sends to the Internet, and what the subscription commits you to.

Version of

01Purpose

These terms govern the use of the Warda-DNS software, of this site and of the optional online service of Warda (warda-cloud), which gives the names and certificates of the encrypted DNS and provides the services of the subscription. The publisher is the private individual described in the legal notice, who can be reached at [email protected].

02The software

Warda is free software, distributed under the GNU Affero General Public License version 3 (AGPLv3). This licence alone governs how you may copy, modify and distribute it. Nothing in these terms restricts the rights it gives you.

03No warranty

  • The Warda software, free software under the AGPLv3 licence, is provided “as is”, without any warranty, as that licence states. This does not exclude the legal guarantees of consumers (conformity of digital content and services) for any paid service that may be offered in the future.
  • Filtering can never be perfect: a site may be blocked by mistake, or a site that should be blocked may get through.
  • You remain responsible for the supervision of minors and for the settings you choose. Warda helps; it does not replace an adult.
  • Keep a way to reach the Internet without Warda (for example the DNS of your router), in case the box stops working.

04What the box sends to the Internet

Your Warda box never sends your browsing history: the history of the queries stays on the box. Here is everything it sends to the Internet:

  • your DNS queries, to the upstream servers you chose, encrypted by default;
  • the downloads of the lists that protect you (warda-lists);
  • the checks for new versions, and the updates of Warda, which are signed;
  • a request for the time, to keep its clock right;
  • the download of the country database (DB-IP);
  • the download of the school holidays (OpenHolidays);
  • the check that a password has not appeared in a known leak (Have I Been Pwned): only the beginning of a fingerprint of the password is sent (k-anonymity), never the password itself; you can turn this check off;
  • for the e-mail addresses you watch for data breaches (subscription): only the first 6 characters of the SHA-1 fingerprint of each address are sent to warda-cloud, which asks Have I Been Pwned (k-anonymity), never the address itself; the test of a password, a tool used only when you ask for it, sends the first 5 characters of the SHA-1 fingerprint of the password from the box to Pwned Passwords, never the password;
  • if you use the online service: the registration of the name of your encrypted DNS, the challenges of its certificate, and the calls to the interface of your DNS provider if you configured one;
  • unless you turn off the second opinion (Protection settings): a suspicious domain (a look-alike name, the server of a beacon), alone, sent to warda-cloud to learn its age (warda-cloud asks the registry of the domain); nothing about the device that asked it;
  • only if an administrator turns it on (Collective base page): registrable domain names only — the suggestions your administrators accept or reject, and the names the box doubts — sent to warda-cloud, which returns the opinion of Warda's analysis service; never a device, a person, a time or an address; the identity of the box is not passed to the analysis service (a pseudonym that changes every month);
  • only when you ask for it (page System, or the command warda diagnostic -send): the diagnostic of the box, without any name asked by the devices, any name of the household nor any secret, kept 30 days by warda-cloud for the support;
  • the country of its public address, asked to warda-cloud at the installation and once a week, for the identifier of the installation (nothing of the box is sent; the time zone serves only when there is no answer); an administrator can set it by hand instead;
  • only if the box joins an organisation of sites (Warda Business): every 15 minutes, its name, its version, its state and counts (queries, blocked names, open alerts, devices), sent to warda-cloud for the manager box; never a domain name, a device, a person or a query;
  • only if an administrator turns on the protection outside the home: the DNS queries of the enrolled devices travel, encrypted, through Cloudflare and warda-cloud to the box; when the box cannot be reached, warda-cloud answers them itself through AdGuard DNS, over DNS over TLS; warda-cloud keeps nothing but counts by day and the SHA-256 fingerprint of the secret of each device, never a query, a name or an address;
  • the check of the exposure on the Internet (every week, and when you ask for it): a signed request to warda-cloud with a list of TCP ports (those your router opens by UPnP), after which warda-cloud connects to the public address of your home only, on those ports and on a fixed list of risky ports; it keeps counts by day only;
  • unless you turn off the reputation of the domains (Protection settings): the registrable domain of some of the names asked (example.com for www.example.com, never the full name) — those your household does not know well, and those that imitate a known name — sent to warda-cloud, which passes it to Warda's analysis service and returns its opinion; never the device, a person, a time or an address; the request is signed by the box, but warda-cloud keeps nothing that ties the domain to it: it passes the domain alone to the analysis service, keeps the answers a few hours by domain only, shared by every box, and counts by day;
  • unless you turn off the second opinion (Protection settings), even without the collective base: each look-alike name the box finds, reduced to its registrable domain (example.com), with its kind (other letters, typing mistake…) and the known name it imitates only when that name is a public site of the list built into Warda (never one of the sites your household visits most), sent to warda-cloud, which passes it to Warda's analysis service; once a week at most per domain; never the device, a person, a time or an address; the identity of the box is not passed to the analysis service (a pseudonym that changes every month), and warda-cloud keeps only counts by day;
  • one anonymous statistic a day: a random identifier drawn anew each day, the version, the type of installation, the country you chose, the architecture and the plan of the box (Free, Subscription or Warda Business). You can turn it off at any time on the System page.

05The online service and the subscription

  • The online service is optional: the software works at home without it.
  • No paid offer exists yet. The planned prices are 2 € a month or 20 € a year including VAT for the subscription, the same in every country of the European Union, and 3 € excl. VAT per user a month (capped at 29 € excl. VAT a month per site), or 30 € excl. VAT per user a year (capped at 290 € excl. VAT per site), for Warda Business.
  • The subscription is offered to testers only during the beta test period.
  • Before any billing, terms of sale giving the identity and address of the seller, the right of withdrawal and a named consumer mediator will be published, and you will have to accept them.
  • Testers are told before any payment is asked, and nothing is charged without their explicit agreement.
  • During the beta, the online service may change, be interrupted or stop.

06The beta

The versions of the beta are pre-release versions: they may contain bugs and change often. Your feedback is welcome through the forms of this site (join the beta, report a bug, suggest an idea).

07Acceptable use

Use Warda only on networks you manage: your home, or your business with your employees informed as the law requires, in particular of the activity log, the data loss prevention (DLP) and the unblock requests of Warda Business, which apply the policy of the company. It is forbidden to use it to watch adults without their knowledge, or for any unlawful purpose.

08Liability

Within the limits allowed by law, the publisher is not liable for indirect damages arising from the use of Warda, such as a loss of data, of business or of opportunity. Nothing in these terms limits the rights that consumers have under the law.

09Personal data

The privacy page explains what this site keeps and what its forms send. Under the GDPR you can access, correct or delete the data that concern you by writing to [email protected], and lodge a complaint with the CNIL (www.cnil.fr).

10Changes to these terms

These terms may change. A new version is shown in the Warda software, which asks you to accept it again; the date of the version in force is at the top of this page.

11Law and disputes

These terms are governed by French law. In case of dispute, write first to [email protected] to look for a friendly solution. Failing that, the dispute goes to the competent courts under the ordinary rules. If you are a consumer living in another country of the European Union, you keep the protection of the mandatory rules of the law of your country. Consumers may also turn to a consumer mediator.

Questions: [email protected]