Privacy Policy
This policy explains what personal data Vladimir Kim, an individual based in New York, United States (“we”), processes when you use the DomainDiction website, browser extension and services, and what choices you have.
What we collect
| Data | Why |
|---|---|
| Email address and, with Google sign-in, your Google account identifier | To create and secure your account and to send sign-in codes and service messages |
| Plan and usage counters (number of checks per period) | To apply plan limits and prevent abuse |
| Domain names you submit for checking | To return results. They are processed to answer your request; we do not build a history of your searches. Domain names may be kept in short-lived caches (up to 7 days) that are not linked to your account. |
| Technical data: IP address, browser and request metadata in server logs | Security, rate limiting and troubleshooting; kept for a limited period |
| Billing details | Handled by Paddle, our Merchant of Record; we receive only what is needed to manage your subscription (for example plan and status), not your full card details |
The browser extension
- It reads page content only when you ask it to (the “From this page” button or the right-click menu), and only to extract domain names from that page.
- It does not collect your browsing history, and it does not track you across sites.
- Settings, your sign-in tokens and a cache of recent results are stored locally in your browser.
- Data obtained through the extension is used only to provide its features. It is not sold, not used for advertising and not transferred to third parties except the service providers listed below.
Service providers
- Google — sign-in (if you choose it)
- Resend — sending sign-in emails
- Paddle — payments, invoices and tax
- Cloudflare — website delivery and security
- DigitalOcean — hosting
- Ahrefs — Domain Rating lookups; only domain names are sent, not your identity
Legal bases (EEA/UK)
Performance of our contract with you (account, service, billing), our legitimate interests (security, abuse prevention, improving the Service) and legal obligations (tax records).
Retention
Account data is kept while your account is active and deleted within 30 days after you ask us to delete the account, except records we must keep by law. Caches expire within 7 days; logs are rotated.
Your rights
You can ask to access, correct, export or delete your data, or object to processing, by writing to [email protected]. You may also complain to your data protection authority.
US state privacy rights
Residents of California and other US states with privacy laws can request access to or deletion of their personal information at the address above. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for exercising these rights.
Security
Connections are encrypted, sign-in codes and session tokens are stored only as hashes, and access to production systems is restricted.
Children
The Service is not intended for people under 16.
Changes
We will post changes on this page and update the date above; material changes are announced by email.