Privacy policy

Last updated: May 23, 2026

This policy explains what data SerpNames collects, how we use it, and your rights.

1. What we collect

When you use SerpNames, we collect:

  • Account data: name, email, password (hashed), Telegram username (if provided)
  • Order data: domains purchased, prices, payment method, billing details
  • Usage data: pages visited, search queries, saved domains, IP address, browser type
  • Communication data: messages you send us via Telegram or email

2. How we use it

We use your data to:

  • Process orders and transfer domains
  • Send order updates, payment confirmations, and transfer notifications
  • Notify you of new domains matching your interests (if you opt in)
  • Respond to support requests
  • Prevent fraud and abuse
  • Improve the marketplace based on aggregated usage patterns

3. Third parties we share with

We share limited data with:

  • Payment processor — card data goes directly to them; we don't store full card numbers
  • Email service — to deliver transactional emails (orders, password resets)
  • Telegram — if you message us, Telegram processes that conversation under their terms
  • Domain registrars — when transferring domains, registry data is shared as required
  • Analytics — privacy-respecting analytics (no individual tracking, no profile building)

We don't sell your data to advertisers or data brokers. Ever.

4. Cookies

We use minimal cookies for login sessions and basic preferences. We don't use third-party advertising cookies or cross-site tracking.

5. Data retention

We keep account data while your account is active and for 12 months after closure (for legal/tax records). Order records are kept for 7 years for tax compliance. Sourcing inquiries are deleted 90 days after resolution.

6. Your rights

You can:

  • Access the data we hold about you
  • Correct inaccurate data
  • Delete your account (subject to legal retention requirements above)
  • Export your data in a portable format
  • Opt out of marketing emails (transactional emails are required for service)

To exercise any of these rights, message us on Telegram or email — we respond within 30 days.

7. Security

Passwords are hashed (bcrypt). Payments are processed by PCI-compliant providers. Site files are stored on encrypted object storage with access tokens that expire. We use HTTPS everywhere.

8. Children

SerpNames is not for users under 18. We don't knowingly collect data from minors.

9. International users

If you're in the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA. We honor all such requests.

10. Changes

We'll notify active users of material changes via email.

11. Contact

Questions about privacy: @serpnames on Telegram.

This is a starting template. Please have a privacy lawyer in your jurisdiction review before going live, particularly for GDPR/CCPA compliance.