Privacy Policy
This policy explains what data namedorm (“we”, “the service”) processes when you use namedorm.com, why we process it, and the choices and rights available to you.
1. What we collect
- Account and profile data. When you sign in with Google or a magic link, we receive and store your email address and, where supplied, your name and profile image. Authentication is provided by Supabase.
- Hunts and results. Your naming brief is sent to OpenAI to generate candidates. For signed-in users, we store the brief, generated results, availability counts, and creation time so we can enforce plan limits and show hunt history. Anonymous briefs are not stored in our database.
- Watchlist data. We store domains you save, including availability, estimated pricing, rating, and related result metadata.
- Subscription records. We store subscription identifiers, status, plan, and renewal or end dates received from Lemon Squeezy. We do not receive or store full card details.
- Contact messages. If you use our contact form, we store your name, email, company (if supplied), topic, message, and submission time.
- Domain queries. Candidate domains are checked against public DNS/RDAP services and the Porkbun API for availability and pricing.
- Security and diagnostics. We process IP addresses and request/device information for rate limiting, abuse prevention, hosting logs, and error diagnostics.
- Analytics and advertising data. With your Analytics consent, PostHog processes page views, product events, and standard browser/device data. With your Marketing consent, LinkedIn Insight Tag may process page URL, referrer, IP address, browser/device data, timestamps, and advertising identifiers for campaign measurement and retargeting. Google Ads and Meta Pixel record page views for campaign and conversion measurement.
2. What we do not collect
- We do not store your Google password or email-account password. Google and Supabase handle the authentication flow; magic-link access is passwordless.
- We do not store full payment-card details. Lemon Squeezy processes checkout and payment information as Merchant of Record.
3. Why we process data
We process data to:
- provide accounts, naming, domain checks, watchlists, subscriptions, and support;
- enforce plan limits, secure the service, and prevent abuse;
- maintain, diagnose, and improve the product;
- measure analytics and advertising only where you have given the relevant consent; and
- meet legal, tax, accounting, and regulatory obligations.
4. Service providers and transfers
We use the providers below to operate namedorm. Depending on provider and project configuration, processing may involve international transfers.
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database, and account data |
| OpenAI, L.L.C. | Generate names from your brief |
| Porkbun LLC / public DNS and RDAP services | Domain availability and pricing |
| Lemon Squeezy | Checkout, payments, tax, and subscription lifecycle |
| Upstash | Short-lived rate-limit counters |
| Vercel Inc. | Hosting and request logs |
| Sentry (Functional Software, Inc.) | Error monitoring and diagnostics |
| PostHog | Optional product analytics |
| Google Ads | Optional advertising measurement and retargeting |
| Optional campaign measurement, insights, and retargeting | |
| Meta | Optional campaign measurement and retargeting |
When you continue to a registrar or Lemon Squeezy checkout, that provider’s privacy policy also applies to information you submit directly to it.
5. Cookies, local storage, and consent
We use three categories of browser storage and tags:
- Essential: authentication, security, theme, session state, and your saved consent choice.
- Analytics: PostHog, loaded only after Analytics consent.
- Marketing: LinkedIn Insight Tag is loaded only after Marketing consent. Google Ads and Meta Pixel are installed for page-view and conversion measurement.
Optional tags are blocked until you make a choice. You can reject them and continue using the service, or change your choice at any time through “Cookie settings” in the footer. Changing consent applies to future processing; providers may retain data already collected as described in their policies.
6. Retention
Account, hunt, watchlist, and subscription records are generally retained while your account is active and deleted or anonymised when no longer needed, subject to legal and accounting obligations. You can delete your account from Settings. Contact messages are retained only as long as needed to handle the request and related follow-up. Rate-limit counters expire automatically. Analytics, advertising, hosting, payment, and diagnostic data follow the relevant provider’s configured or legally required retention period.
7. Your rights
Subject to applicable law, including the GDPR and Turkey’s KVKK, you may request access, correction, deletion, restriction, objection, or portability, and may withdraw consent at any time. You may also complain to your local data protection authority. Account export and deletion controls are available in Settings.
8. Contact
Data controller: Halitcan Çıkıkçı
100. Yıl Neighbourhood, 1050. Street No:3, Boğaziçi Akademi Evleri, Floor 4 Apt 32, Karabük, Turkey
Email: info@namedorm.com
9. Changes
We may update this policy as the service and its providers change. Material changes will be reflected by the “Last updated” date above.