Privacy Policy

The controller responsible for data processing on this website pursuant to the General Data Protection Regulation (GDPR) is:

We collect three kinds of information: who you are, what you pay for, and what you do on the site.

2.1 Account Data

Your name, email address and password. If you sign in with Google or GitHub, we receive your basic profile information (name and email address) from the provider; the sign-in itself takes place with the provider under its own privacy policy.

2.2 Payment Data

Payments are processed by our payment provider (Stripe). We receive what is needed to manage your subscription and issue invoices. We do not store full card numbers.

2.3 Usage Data

What you search for, download and switch on, your support requests, and the technical data your browser sends with each request, such as your IP address.

2.4 Blog Subscription

If you subscribe to new blog articles by email, your email address. No account is needed for this.

2.5 What You Must Provide

To create an account you must provide a name, an email address and a password, or sign in with Google or GitHub; without this we cannot create the account. Payment details are needed only for a subscription.

DomainKits is a domain intelligence platform. We collect, process and publish publicly available domain registration records, such as domain names, registration status and dates, nameservers and DNS records, registrar details and certificate records. We do not collect or publish registrant contact details.

This data is obtained from publicly accessible sources, such as registries, registrars, public DNS, certificate transparency logs and domain marketplaces. Legal basis: legitimate interest in providing domain and DNS intelligence (Art. 6(1)(f) GDPR). Records are updated regularly; registration data can change at any time, so a record may be out of date. If you believe a record relates to you, you can use the rights process in Section 9.

Requesting Removal of a Domain

To request that a domain be excluded from DomainKits search results, email info@domainkits.com with the domain name. Requests are reviewed individually.

We process your personal data for the following purposes and on the following legal bases:

Purpose	Legal Basis	GDPR Article
Account creation, sign-in via Google or GitHub, service delivery, support, and account and service emails (verification, password reset, payment confirmations, renewal reminders and the alerts you enable)	Contract performance	Art. 6(1)(b)
Payment processing and subscription management	Contract performance	Art. 6(1)(b)
Blog subscription and news about DomainKits by email	Consent	Art. 6(1)(a)
Essential cookies, security, abuse and fraud prevention, enforcement of our Terms of Service, service improvement (typically with aggregated data)	Legitimate interest	Art. 6(1)(f)
Tax and commercial records	Legal obligation	Art. 6(1)(c)

Where we rely on legitimate interest, our interests are operating and securing the service, preventing abuse and fraud, and improving the service. You have the right to object to this processing (see Section 9).

We share personal data only with the following categories of recipients, and only as far as needed:

Recipient	Purpose	Data
Hosting providers in the EU and the US	Running the service	Service data
Stripe	Payment processing	Billing information
Cloudflare	Content delivery and security	IP address and request data
Email delivery provider	Sending account, service and subscription emails	Email address and message content

Where providers act as our processors, they process personal data under our instructions and data processing agreements (Art. 28 GDPR). Some providers, including Stripe, also act as independent controllers for certain activities.

Legal Disclosures

We may disclose your information when required by law or court order, or to protect our legal rights.

Business Transfers

In the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction.

This site uses essential cookies only: login sessions, security and site functionality (GDPR and § 25 TDDDG). No consent-requiring cookies are in use, so no consent dialog is shown. You can block or delete cookies in your browser settings; some features, such as staying signed in, then stop working.

This site does not serve third-party advertising. Links to third-party sites, including affiliate links, lead to sites with their own privacy and cookie policies.

Our servers are located in the European Union and the United States. Where a provider processes personal data outside the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework for providers certified under it, or by Standard Contractual Clauses. You can request a copy of the safeguards by contacting us.

We keep personal data only as long as the purpose requires:

• Who you are (account data): for as long as your account exists.
• What you do (usage data): records behind the features you use, such as monitors, alerts, downloads and support tickets, for as long as your account exists; request and search logs on a rolling basis only as long as needed to operate the service, after which only statistics remain that no longer identify you.
• Security records: sign-in history and similar security records on a rolling basis for as long as needed to detect and investigate abuse. Where an account or address has been blocked for abuse, we keep the minimum needed to keep the block in place (the email address, IP addresses and the date of the event) for as long as the block remains.
• Payment records: for the periods required by German commercial and tax law.
• Blog subscription: until you unsubscribe; unconfirmed requests are removed automatically. The subscription is independent of your account.

When you delete your account, we delete your account and profile data, except where retention is required for security and abuse prevention or to comply with statutory retention obligations.

Under the General Data Protection Regulation, you have the following rights:

Right of Access (Art. 15)

Request a copy of your personal data and information about how it is processed.

Right to Rectification (Art. 16)

Request correction of inaccurate or incomplete personal data.

Right to Erasure (Art. 17)

Request deletion of your personal data ("right to be forgotten") under certain circumstances. You can also delete your account yourself from your profile.

Right to Restriction (Art. 18)

Request restriction of processing while we verify accuracy or assess objections.

Right to Data Portability (Art. 20)

Receive your data in a structured, machine-readable format and transmit it to another controller.

Right to Withdraw Consent (Art. 7(3))

Withdraw consent at any time. This does not affect the lawfulness of prior processing.

Right to Lodge a Complaint (Art. 77)

You have the right to lodge a complaint with a supervisory authority. The competent authority for us is:

How to Exercise Your Rights

Contact us at info@domainkits.com. We will respond within one month; complex requests may take longer, as permitted by Art. 12(3) GDPR. Identity verification may be required.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

If you believe we have collected information from a child, please contact us at info@domainkits.com. We will promptly delete such data.

We may update this Privacy Policy from time to time. The date at the top shows when it was last changed.