Privacy policy
Effective October 16, 2026 · Current preview service
Backend Developments, LLC · domainvana@gmail.com
Who operates Domainvana
Domainvana is operated by Backend Developments, LLC. This notice explains the information used by our current domain-search and account preview at domainvana.com. Contact domainvana@gmail.com with privacy questions or requests.
Information we process
When you sign in, our authentication provider, Clerk, processes your account identifiers, email address, profile details provided by your chosen sign-in service, and any phone number you provide. Domainvana uses your account identifier to associate saved carts, sample orders, preview assets, DNS drafts, and marketplace listing drafts with your account. Information you send to our support address is also processed to respond to you. If you separately opt in to Domainvana email updates, we store your email address, the topics you selected, the signup source, the consent notice version and time, and whether you later changed your topics or unsubscribed. Authorized Domainvana administrators can review and export only active, consented email preferences to operate this opt-in program; these records are not used for advertising targeting, and no marketing messages are currently sent. We keep a one-way hash of a random preference-management token to let this browser manage those choices; the token itself is held in a protected browser cookie. We do not infer marketing interests from your browsing.
Searches, device information, and local storage
Live domain searches and suggestions send the requested domain or search terms to GoDaddy. Our hosting and authentication providers process technical information such as IP addresses and request metadata to deliver and protect their services. For domain-search and some API abuse prevention, our rate-limit table stores a SHA-256-derived identifier for an IP address and, for signed-in requests, the account identifier, with the current minute window and count; the original IP address is not stored in that table. The IP-derived identifier is stable for the same address and has no automatic cleanup in the current implementation, so it can remain until overwritten or removed. Email-signup rate limiting uses a separate hash that changes by hour; cleanup is opportunistic and runs only when a signup occurs during UTC hour 00, deleting rows older than 48 hours. These identifiers are used for rate limiting, not advertising. Your browser stores guest cart selections, favorites, and up to eight recent discovery searches locally; authentication and email-preference management use protected cookies or equivalent session storage. You can remove saved names and clear recent discovery history on the search page. Clearing browser storage removes local selections and can sign you out or remove access to the email preference controls in that browser.
Why we use information
We use information to authenticate users, provide domain discovery, save requested account activity, respond to support requests, investigate errors, prevent abuse, and—only after explicit opt-in—record the email topics a person asked to receive. Email marketing delivery is not currently enabled; choosing topics records a preference but does not cause an email to be sent. Depending on the activity and applicable law, processing may be necessary to provide a requested service, pursue legitimate security and operational interests, meet legal obligations, or honor consent where required.
Service providers and disclosure
Cloudflare hosts the site and account database; Clerk provides authentication; GoDaddy supplies live domain discovery. A sign-in provider such as Google processes authentication under its own policies. Providers may process data in other countries, including the United States. We may disclose information when required by law or reasonably necessary to protect users and the service. The current application does not include advertising targeting or a data-sale feature. This does not describe every independent practice of a third-party service.
Payments and preview records
Customer payment collection is not enabled in the current preview. Sample orders do not charge a card or register a domain. Stripe credentials being configured does not mean a payment has occurred. We will update this notice and provide the relevant checkout disclosures before introducing live customer payment processing or registrar fulfillment.
Retention and your choices
Email preference records are retained unless a deletion request is completed. Unsubscribing clears the selected topics and marks the address as unsubscribed, but does not delete the email address, preference-management token hash, or consent and change history. We retain this suppression record to honor the unsubscribe and document the choices made unless a later signup explicitly records renewed consent. No automatic retention period is configured for email preference records. From the same browser where a person subscribed, the email-preferences page can unsubscribe or permanently delete the stored address, topics, and associated consent history from the active preference database; deletion clears the management cookie and local popup suppression. Copies may remain in backups for a limited time where applicable. If the management browser is unavailable, the person can contact domainvana@gmail.com and we may ask them to verify ownership. The browser management cookie expires after one year, but that does not automatically delete the related server-side record. Email-signup rate-limit records are cleaned opportunistically: only a signup during UTC hour 00 triggers deletion of rows older than 48 hours. Domain-search rate-limit identifiers have no automatic cleanup in the current implementation and may remain until overwritten or removed. Other account records remain while needed to operate the account and address support, security, and legal requirements. Retention varies by record and provider; deletion is not necessarily immediate and copies may remain in backups or where legally required. To request access, correction, deletion, or other privacy rights available where you live, email domainvana@gmail.com. We may need to verify your identity. You may also revoke a connected sign-in service through that service. Rights and exceptions depend on applicable law; you may have a right to complain to your local privacy regulator.
Security, age, and updates
We use access controls, encrypted network connections, and server-side secret storage, but no system can guarantee perfect security. Domainvana is intended for adults acting for themselves or an authorized business, not children. If you believe a child has submitted personal information, contact us. We will update the date of this notice when it changes and provide additional notice where required.