PRIVACY POLICY
Your data. Your control.
How your account information, billing, site usage, and advertising choices are handled.
What is saved
Firebase Authentication manages sign-in, passwords, and session credentials. Firestore saves your account profile, domain records and custom metadata, connections, groups, collections, project statuses, and portfolio preferences. Private account data is accessible to your authenticated account and trusted app Owners. Guest records and old local accounts remain separate in browser or device storage and are not automatically uploaded.
Contact messages
The contact form saves your name, email address, optional phone number, subject, message, submission time, and signed-in Firebase user ID when available. Messages are stored in Firestore and can only be read and managed by trusted app Owners. You can submit without an account. Contact submissions are separate from your portfolio and are retained when account data is reset. No confirmation or notification emails are sent. Explicit local mode stores submissions on the current browser or device.
What leaves your device
Account sign-in and saved account data are sent to Firebase. Your portfolio loads and registrar syncing starts after you open Domains. Syncing sends configured connection values through the app's server to their registrar for read-only domain requests. Hostinger discovery sends domain names, without account credentials, to public registry RDAP services to identify the registrar. The relay does not persist connection values; returned domains are saved to your account. CSV exports can be downloaded or shared. Domain favicons, external images, and provider links contact their hosting sites.
Subscriptions and payments
Stripe hosts Checkout and Manage Billing and handles the payment information you enter there. The app sends Stripe your account reference, name, email, and selected plan to connect billing to your account. Private server-managed records store Stripe customer, subscription, Checkout, and event references, subscription status, and access dates for billing synchronization. Active app Owners can view aggregate invoice amounts and subscription activity for this app; these reports exclude customer names, email addresses, payment details, and individual billing references. The app does not store card numbers or card security codes. These records are separate from public profiles and portfolio exports. Stripe processes payment information under its own privacy practices.
Usage analytics and local storage
Vercel Web Analytics processes page-visit information to help us understand use of the site. Browser or device storage also supports sign-in, guest records, and preferences such as your theme. Browser controls can clear this local information, which may sign you out or remove guest data; they do not delete your Firestore records or cancel subscriptions.
Google advertising
Eligible public web content can display Google AdSense ads after Google approves ad serving and the site's Ads setting is enabled. Signed-in accounts with confirmed Starter access and active Owners are excluded from advertising. Ads remain off while account or plan eligibility is unresolved and on private, authentication, payment, search, contact, policy, and error pages. Google and participating advertising vendors may use cookies or similar technologies to select and measure ads, limit repeated ads, and help prevent fraud. Advertising cookies can support personalization using visits to this and other websites. Google describes its processing in the following policies.
Advertising choices and consent
Google's Privacy & messaging consent platform provides applicable advertising choices, including European regulations consent and US state opt-outs. Ad requests stay paused while the required consent state is unknown. When advertising is available, use Google's privacy and cookie settings or applicable Do Not Sell or Share link on the page to review your choices. A refusal or withdrawal can prevent ads; declining personalization can instead permit non-personalized ads when the required storage/vendor choices allow them. Non-personalized advertising does not bypass applicable consent requirements.
You can also manage Google's ad personalization through My Ad Center and participating vendors' choices through AboutAds. These external links do not replace this site's consent message. Your browser provides additional cookie and site-storage controls. Starter ad exclusion applies while signed in to the subscribed account; a signed-out visitor cannot be identified as its subscriber.
Domain search and website information
Submitting Search sends the requested domain and saved connection values through the server to eligible supported registrars. Starter's Refresh Website Info sends chosen domain names to Google PageSpeed Insights and Tranco for public performance and rank lookups, without registrar credentials. Results and source dates are saved in your account portfolio. These services and registrar purchase links have their own privacy practices.
Profile visibility
Profiles start private. Choosing Public publishes an allowlisted display profile; opting into domain sharing also publishes eligible domain names and project summaries. Community posts follow their public, follower, or private audience and the author's profile visibility. Public portfolio data can be accessed outside Community. Private notes, contacts, financial data, and registrar credentials are excluded from public projections. Optional local mode shares eligible profiles and posts only between accounts on the same browser or device.
Your controls
Edit or remove portfolio records and sign out from your avatar menu. Profile can delete saved cloud data while keeping connections, or delete data and connections together; both reset profile sharing and sign out after cleanup. Clearing account data does not cancel a paid subscription or stop billing. Open your Starter subscription page and choose Manage Billing to manage payments or schedule cancellation before clearing data. Billing references and subscription status are retained separately. Account deletion and deactivation are unavailable for Firebase accounts. Clearing browser data or removing the app does not delete Firestore account records, but can remove guest records and local sessions. Export a backup before deleting data.
Credentials
Connections saves registrar values separately from account profile records. Your authenticated account and trusted app Owners can read those private Firestore records. The client sends the values to the read-only registrar relay when needed; this is not a server-only secret vault or app-managed credential encryption. Values are excluded from public projections and CSV exports. Optional local mode saves values on the current device. Do not put passwords or API keys in posts, domain notes, or CSV files.