Privacy Policy

What we collect

• Account details: your email address, optional name and a one-way scrambled (hashed) version of your password. We never store your password itself.
• Usage: the domains you check with paid features, your check balance and history, so we can show them in your dashboard and keep your balance accurate.
• Technical data: your IP address, used briefly in memory to prevent abuse and rate-limit requests. It is not stored with your account.
• Payments: handled entirely by Paddle, our Merchant of Record. We never see or store your card details. Paddle shares with us the transaction ID, amount and the pack you bought.

Cookies

We use one essential cookie to keep you signed in. It contains a random session ID, not personal information, and expires after 30 days or when you sign out. We don't use advertising or tracking cookies. Paddle may set its own cookies during checkout, covered by Paddle's privacy policy.

Why we use it

• to provide your account, reports and check balance (performance of our contract with you);
• to prevent fraud and abuse (legitimate interest);
• to meet legal and tax obligations for purchases (legal obligation).

We don't sell your data or use it for advertising.

Who we share it with

• Paddle.com, to process payments, invoices, taxes and refunds;
• our hosting provider, which stores the service's data on our behalf;
• authorities, only where the law requires it.

Domains you look up are sent to data providers to fetch their metrics. Domain names are not personal data and are never sent together with your account details.

How long we keep it

Account data is kept while your account exists. When you delete your account, your profile, history and balance are deleted immediately. Purchase records may be kept by Paddle and by us for as long as tax law requires.

Your rights

You can access, correct, export or delete your data, and object to or restrict its use. Most of this you can do yourself in your account settings. For anything else, email [support@your-domain.com] and we will reply within 2 business days. You can also complain to your local data protection authority.

Security

Passwords are hashed with scrypt, sessions use secure, HTTP-only cookies, and all traffic is encrypted with HTTPS. No system is perfectly secure, but we take reasonable steps to protect your data.

Children

The service is not intended for children under 16, and we don't knowingly collect their data.

Changes and contact

We will update the effective date above when this policy changes. The data controller is [Your legal or company name], [Your business address]. Contact: [support@your-domain.com].