Privacy Policy
1. Introduction
DomainHunter (“we”, “us”, or “our”) provides a SaaS platform for discovering expired domains with authority backlinks. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service at domainhunter.info. Effective date: May 2026.
By using our service, you agree to the practices described in this policy. We've written it in plain English wherever possible — if you have questions, email privacy@domainhunter.info.
2. Information We Collect
Account information
- Email address, name, and a hashed password (we never store plaintext passwords).
- Optional: profile picture, company, time zone.
Usage data
- Searches you run, filters you apply, domains you save, links you click.
- Page views and time spent in the dashboard.
Payment information
- Handled entirely by Lemon Squeezy. We never see or store your card numbers.
- We retain billing metadata: invoice IDs, subscription status, country, currency.
Cookies
- Essential cookies (authentication, session).
- Privacy-friendly analytics (PostHog).
- Preferences (theme, currency, locale).
Technical information
- IP address (we hash it before storage), device type, browser, OS.
- Referrer URL and UTM parameters where present.
3. How We Use Your Information
- Provide, operate, and improve the service.
- Process payments and subscriptions through Lemon Squeezy.
- Send transactional emails through Resend (alerts, receipts, password resets).
- Send marketing emails — only if you opt in. You can unsubscribe at any time.
- Detect, prevent, and respond to fraud, abuse, and security incidents.
- Comply with legal obligations and respond to lawful requests.
4. Zone File Data Usage
DomainHunter relies on zone file data from ICANN's Centralized Zone Data Service (CZDS) under approved access agreements. This data is used exclusively for:
- Identifying expiring or recently expired domain names.
- Cross-referencing those domains against our backlink authority database.
We do not redistribute raw zone files, do not use zone data for unsolicited marketing, and we comply with all CZDS Terms of Use, rate limits, and retention requirements.
5. Third-Party Services
- Cloudflare — CDN, DNS, DDoS protection.
- Supabase — database and authentication.
- Lemon Squeezy — payment processing and tax.
- Resend — transactional email delivery.
- PostHog — privacy-friendly product analytics.
- Sentry — error and performance monitoring.
- DataForSEO — backlink data provider.
- ICANN CZDS — zone file source.
6. How We Share Information
- We do not sell your personal data to anyone.
- We share data only with service providers under data processing agreements.
- We may disclose data in response to lawful legal process (subpoenas, court orders).
- If DomainHunter is acquired or merged, your data may transfer to the successor — with notice and the same protections.
7. Cookies and Tracking
- Essential cookies for sign-in and session persistence.
- Analytics via PostHog — no fingerprinting, no third-party advertising trackers.
- EU visitors see a cookie consent banner before non-essential cookies are set.
8. Your Rights
Regardless of where you live, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Receive a copy of your data in a portable format.
- Object to or restrict certain processing.
- Opt out of any “sale” of personal information (we don't sell, but listed for CCPA compliance).
To exercise any of these rights, email privacy@domainhunter.info.
9. Data Retention
- Account data: kept while your account is active and for 30 days after deletion.
- Usage logs: 12 months maximum.
- Payment records: 7 years (required by tax law).
- Zone file data: kept per CZDS Terms — typically up to 90 days.
10. Data Security
- AES-256 encryption at rest.
- TLS 1.3 encryption in transit.
- Bcrypt password hashing.
- Hashed IP addresses.
- Regular third-party security audits.
- Documented incident response plan.
11. International Data Transfers
Your data is processed in the United States (Supabase, Cloudflare). For EU residents we rely on Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.
12. Children's Privacy
DomainHunter is not intended for users under 18. We don't knowingly collect data from minors; if we learn we have, we'll delete it.
13. California Residents (CCPA)
- Categories collected: identifiers, commercial information, internet activity, geolocation (city-level).
- We do not sell personal information.
- You will not be discriminated against for exercising your rights.
14. EU Residents (GDPR)
- Legal bases: contract performance, legitimate interest, consent, and legal obligation.
- You have the right to lodge a complaint with your local supervisory authority.
15. Thailand Residents (PDPA)
- Data Controller: DomainHunter, Bangkok, Thailand.
- You may exercise your PDPA rights by emailing privacy@domainhunter.info.
16. Changes to This Policy
We may update this policy periodically. Material changes will be communicated by email at least 30 days before they take effect. Continued use of the service after the effective date constitutes acceptance.