Privacy Policy
Last updated: April 20, 2026
Your privacy is important to us. This policy explains how we collect, use, and protect your data in accordance with the General Data Protection Regulation (GDPR).
1. Data We Collect
We collect your email address, password (encrypted), and the domain names you wish to monitor. For invoicing and VAT compliance you may optionally provide your name, company name, billing address and VAT number. When you make a payment, your payment details are processed by our payment provider (see section 7). We also collect basic usage data such as IP addresses in server logs.
2. How We Use Your Data
Your email is used to notify you when monitored domains become available, to send subscription confirmations, and for account management. We do not sell or share your data with third parties for marketing purposes.
3. Data Storage and Security
Your data is stored securely using industry-standard encryption. Passwords are hashed and never stored in plain text. All data transfers occur over encrypted HTTPS connections.
4. Your Rights
Under the GDPR, you have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) restrict processing of your data; (e) data portability; (f) object to processing. You also have the right to lodge a complaint with a supervisory authority (e.g. the Dutch Autoriteit Persoonsgegevens). To exercise any of these rights, contact us at info@domainobservation.com.
5. Cookies
We use one essential cookie (cookie_consent) to remember your cookie preferences, and your theme preference is stored in localStorage. Optional analytics cookies are only set with your explicit consent. You can manage your preferences via the cookie banner at any time.
6. Legal Basis
We process your data based on: (a) contract performance — to provide the monitoring service you subscribed to; (b) legitimate interest — to maintain security and improve our service; (c) consent — for optional analytics cookies.
7. Data Processors
We use the following third-party services to provide our service: Supabase (database and authentication, hosted in the EU), Vercel (application hosting and serverless functions), Mollie (payment processing, based in the Netherlands), and Resend (email delivery). These processors only access your data to perform their services and are bound by data processing agreements.
8. Data Retention
Active subscription data is retained as long as your subscription is active. After cancellation or notification, monitoring data is automatically deleted after 30 days. Payment records are retained for 7 years as required by tax law. You can request deletion of your account and all associated data at any time.
9. International Data Transfers
Your data is primarily stored within the European Union. Where data is transferred outside the EU (e.g. for email delivery), appropriate safeguards are in place such as Standard Contractual Clauses.
10. Contact
For privacy-related questions or to exercise your rights, contact us at: Adams Media, Vaandelhof 11, 6852 TJ Huissen, Netherlands. KVK: 64842444. Email: info@domainobservation.com. We will respond to your request within 30 days.