Lookups
When you look up a domain, the domain name is sent from our server to public sources: registry RDAP and WHOIS servers, public DNS resolvers, Team Cymru, the regional internet registries, Certificate Transparency search services, and the website of the domain itself. Those services see our server, not you. Results are kept in server memory for a few minutes so that repeated lookups do not hit the sources again, and are then discarded.
Your IP address
Your IP address is used in server memory to limit how many lookups one connection can run per minute and hour. It is not written to a database and is gone when the server restarts. If the hosting platform tells us the country of a request, a counter for that country is increased for the "lookup activity" globe. The counter holds a country code and a number: no IP address, no domain, no time of an individual request.
The "What is my IP" page reads your address from the request to show it to you and looks up its network operator. It is not stored and not counted.
Accounts
The workspace requires an account. Accounts are handled by Supabase, our authentication and database provider: it stores your email address, the name you enter, a salted hash of your password (we never see the password itself) and the times you signed up and last signed in. A confirmation email is sent to the address you register. You can ask for your account to be deleted.
Workspace data
Portfolio entries, watches, offers, notes and settings are, for now, still saved in your browser's local storage and do not leave your device. Clearing site data, or "Reset demo data" in the settings, removes them. When this data moves to your account, this page will say so first. No payment data is collected.
Cookies and tracking
The public pages set no cookies. When you sign in, a session cookie is set so that you stay signed in; it is used for nothing else and is removed when you sign out. Your colour theme and workspace data are kept in local storage. There are no analytics scripts, advertising pixels or third-party fonts: fonts, images and scripts are served from this site.
Data about domains
Lookup results show public registration, DNS and certificate data. Registration contact blocks are not read from WHOIS at all; only registry-published fields such as registrar, dates, status and nameservers are shown, and RDAP data arrives already redacted by the registry. To correct registration data, contact the registrar of the domain.