Privacy Policy

Domain Flock ("we", "us", "our") provides a dashboard for managing domain registration, DNS and renewal monitoring. This policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

We collect account details you provide directly (name, email, password), domain and DNS metadata pulled from registrars you connect, and usage data such as pages visited and actions taken in the dashboard. We do not collect more than is needed to operate the service.

2. How we use it

Your information is used to operate your account, monitor renewals and DNS changes, send the alerts you've configured, and improve the reliability of the product. We never sell your data to third parties.

3. Registrar connections

When you connect a registrar account, we store the credentials or API tokens needed to read domain and DNS data on your behalf, encrypted at rest. You can disconnect a registrar at any time, which immediately revokes our access.

4. Data sharing

We share data only with service providers who help us run Domain Flock (such as hosting and email delivery, and Google if you accept analytics cookies, see section 5), under contracts that limit their use of it, or when required by law.

5. Cookies and analytics

We use cookies that are needed to run the service: a session cookie that keeps you signed in, and, if you choose to stay signed in when you log in, a cookie that remembers you on that device. These do not need your consent.

On our website we would also like to use Google Analytics to understand how the site is used. These load only if you click "Accept" in the cookie banner. If you click "Decline", or do not answer, they are not loaded. We remember your choice in your browser. When you accept, Google receives information about your visit, such as the pages you view and your device and browser, and may set cookies of its own.

You can change your mind at any time: change your cookie choice.

6. Data retention

We retain account and domain data for as long as your account is active. When you delete your account, we remove your personal data and disconnect registrar access within 30 days, except where retention is required for legal or accounting purposes.

7. Your rights

You can access, correct, export or delete your personal data at any time from your account settings, or by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

8. Security

We use industry-standard encryption in transit and at rest, and restrict internal access to data on a need-to-know basis. No system is perfectly secure, but we work to keep your data protected.

9. Changes to this policy

We'll update this page if our practices change, and post a visible notice for material changes.

10. Contact us

Questions about this policy? Get in touch.