Privacy notice
Who we are
Domain Detective is provided by Domain Detective. We are the controller of the personal data described here.
What we collect and why
Your account
Your email address, a secure one-way hash of your password, your workspace name and team memberships, so that we can provide the service you signed up for (contract). We record sign-ins, password changes and similar security events, including the IP address used, to protect accounts from misuse (legitimate interests).
Checks and monitoring
The domain names you check or monitor and the results. On the free plan one-off checks are not saved. On paid plans saved checks and monitoring history are kept as described below. Results are public information about domains, but they can include personal data where a domain's public records name a person.
Activity log
We keep a log of what is done in each workspace: which domains were checked or monitored, monitors added, changed or removed, reports exported, sign-ins and team changes, with the time. Entries identify the workspace and the account only by internal numbers, not by name, email address or IP address, and do not contain check results. We use the log to run and secure the service, to investigate misuse, and to answer requests about your data (legitimate interests). Only our authorised staff can view it, and every view is itself recorded.
Payments
Payments are handled by Stripe. We receive and keep a customer reference, your subscription status, plan and renewal dates; we never receive your card details.
Emails we send
Account emails (confirmation, password reset, invitations) and, on paid plans, alerts you have chosen. You can turn alert emails off at any time from the Alerts page or with the link in each alert.
Free checks without an account
If you check a domain on our website without signing in, we record the domain name and the time in our activity log, not who you are. To apply the daily allowance we count your checks using a scrambled (keyed hash) form of your IP address and its network, which we delete after one day (legitimate interests: preventing misuse of the free service).
Website visits
Our web server records each request, including your IP address, to keep the service secure and working. We use a single cookie, only after you sign in or use a form, to keep you signed in and to protect forms against forgery. It is strictly necessary, so we do not ask for consent. We use no analytics or advertising cookies.
Who else handles your data
- OVHcloud — hosts our servers.
- Stripe — payment processing.
- Our email relay — sends our emails.
- Public data sources — when a check runs, the domain name (never your identity or IP address) is sent to public DNS and registration services such as Google Public DNS and RDAP registries.
How long we keep it
- Account data: while your account exists.
- Monitoring observations: as long as your plan's history period (shown on the pricing page); change events and alerts: 400 days.
- Activity log: 400 days.
- Sign-in sessions: deleted 30 days after they end. Password-reset and confirmation links: 30 days after they expire.
- Security events: 400 days.
- Rate-limit counters: one day, stored only in scrambled form.
Your rights
You can ask for a copy of your data, its correction or deletion, the restriction of its use, or object to our use of it based on legitimate interests. Contact us at the address above.
If you are unhappy with how we use your data, please contact us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.