Privacy policy

What we collect

• Account data — your email address and a salted hash of your password (PBKDF2-SHA256; we never store or see the password itself).
• Your lists — watchlist entries, saved searches and email preferences you create while using the site.
• Technical logs — our hosting provider records standard request metadata (IP address, user agent, URL) for security and abuse prevention, retained briefly.

We collect nothing else. No profiles, no data brokers, no sale of personal data — ever.

Cookies & analytics

• One session cookie (HttpOnly, Secure) keeps you logged in. It is strictly necessary and is removed when you log out.
• Cloudflare Turnstile protects the login and registration forms from bots.
• Analytics — if enabled, we use Cloudflare Web Analytics, which is cookieless and does not track you across sites. We run no advertising or cross-site trackers.

Email

We send email only for things you asked for: account confirmation, password resets, and — if you opted in — saved-search alerts, watchlist availability alerts and the daily digest. Every alert type can be switched off in account settings. Delivery is handled by Resend acting as our processor.

Service providers

The site runs on Cloudflare (hosting, database, bot protection), with our own relay servers on Google Cloud used to query public domain-data APIs. When you request a WHOIS, availability or SEO check, only the domain name you clicked is sent to the upstream source (WhoisFreaks, registry RDAP servers, the Internet Archive, Open PageRank, Wikipedia) — never your identity.

Retention & deletion

• Domain list data is retained for 30 days; WHOIS lookups are cached for 7 days.
• Your account data is kept until you delete it.
• Self-service deletion — account settings → Delete account removes your account, watchlist, saved searches and tokens immediately and permanently.

For anything else — access, correction, or questions about this policy — email [email protected].