// privacy policy

What we store, and why.

last updated · 23 August 2026

// 1. who we are and scope

This policy explains what Database.Domains collects when you visit Database.Domains or use the Service, why it is collected, and what control you have over it. It covers the website, accounts, search features and subscription billing.

The Service is operated by Mr Yasn, a sole trader trading as "Database.Domains". Mr Yasn is the data controller for personal data processed through the Service and decides the purposes and means of that processing. Contact: team@database.domains.

Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. Paddle acts as an independent controller for payment data it collects and handles billing inquiries and returns.

// 2. account data

When you create an account we store your email address, an optional display name, the timestamps of account creation and last sign-in, and your plan status. Passwords are never stored in readable form — authentication and password hashing are handled by our managed authentication provider. If you sign in with Google, we receive your email address and basic profile information from Google, not your Google password.

// 3. usage data

To enforce plan limits and keep the query engine healthy we record: per-day counters of database searches, keyword lookups and bulk lookups tied to your account; anonymous query latency and error samples; and, for signed-out visitors, a random device identifier stored in your browser so free daily limits can be applied. That identifier is not linked to a name and is cleared when you clear site data.

We do not build advertising profiles, do not sell usage data, and do not run third-party advertising trackers.

// 4. searches and watchlists

Search terms are processed to return results and may appear in short-lived server logs used for debugging and abuse prevention. Labels you save to your watchlist are stored against your account so they persist across devices, and are deleted when you remove them or delete your account.

// 5. the domain dataset

The searchable dataset contains second-level domain labels, TLD lists and registration counts only. It contains no WHOIS contact records, no registrant names, addresses or phone numbers, and no personal data about domain owners. Labels are factual strings; if a label happens to match a personal name it is present only as a string in a public domain listing.

// 6. billing data

Paid subscriptions are sold and processed by Paddle.com Market Limited ("Paddle"), our reseller and Merchant of Record. Card numbers never reach our servers — Paddle collects your payment and billing details (including billing address and tax location) as an independent controller under its own privacy notice, and handles payments, tax compliance, invoicing, subscription management and returns. We receive and store only the subscription status, plan, renewal date and Paddle's customer and subscription references so we can grant Pro access and answer account questions.

// 7. email

Transactional email — sign-in links, email confirmation, password reset, and billing or account notices — is sent from notify.database.domains through our email delivery provider. We log delivery status (sent, delivered, bounced) so we can diagnose failed sign-ins. We do not sell or rent your address, and we do not send marketing email unless you explicitly opt in.

// 8. cookies and local storage

We use strictly necessary storage only: a session cookie or token so you stay signed in, a theme preference, and the anonymous usage counter described above. There are no advertising or cross-site tracking cookies.

// 9. legal bases and recipients

We rely on: performance of a contract (providing accounts, searches and Pro access); legitimate interests (security, abuse prevention, keeping the query engine healthy, product improvement); legal obligation (tax and accounting records); and consent where required (optional marketing email, which you can withdraw at any time).

We share data with the following categories of recipients:

  • service providers and subprocessors: our managed database and authentication host, application hosting and CDN provider, and transactional email provider;
  • Paddle.com Market Limited, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing;
  • professional advisers such as legal and accounting advisers, where needed;
  • authorities or third parties where required by law, or to investigate abuse and protect the Service.

Where data is transferred outside your region, we rely on the safeguards used by these providers, such as standard contractual clauses or adequacy decisions.

// 10. retention

Account data is kept while your account exists. Usage counters are kept for a rolling short window needed to enforce daily limits and detect abuse. Server and email delivery logs are kept for a limited diagnostic period and then discarded. Billing records are retained as long as tax and accounting rules require. When you delete your account we remove your profile, watchlist and usage records, except records we must keep by law.

// 11. your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to certain processing, and to complain to your local data protection authority. Email team@database.domains and we will respond within a reasonable time. We may need to verify your identity via your registered email address first.

// 12. security

Traffic is served over HTTPS, database access is protected by row-level access rules so accounts can only read their own records, and administrative functions are restricted to authorised staff. No online service can promise perfect security; please use a strong, unique password.

// 13. children

The Service is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

// 14. changes and contact

We may update this policy; the "last updated" date above will change and material changes will be highlighted on this page. Questions or requests: team@database.domains

Related pages: terms of service · refund policy