Privacy Policy

Last updated: May 2025

1. Who We Are

OpenDNM operates a domain name marketplace platform that enables domain owners to list domains for sale and prospective buyers to submit purchase inquiries. We act as the data controller for personal data processed through this service.

2. Data We Collect

When you interact with a domain sale page we collect:

• Name (optional) — provided when submitting an offer
• Email address — required to contact you about your offer or purchase
• Offer amount and message — to process your purchase inquiry
• IP address — hashed (SHA-256) for fraud prevention and rate limiting; the original IP is not stored
• Country — two-letter country code derived from your IP at request time, for analytics
• Visit duration — approximate time spent on a listing page, for seller analytics
• Referrer URL — the page you visited before the listing, for analytics

We do not use third-party tracking pixels or advertising cookies.

3. How We Use Your Data

• To process and communicate about your domain purchase offer or transaction
• To facilitate payment processing via Escrow.com when you initiate a Buy Now purchase
• To provide anonymised traffic analytics to domain sellers (visits, country, duration)
• To prevent fraud, abuse, and spam (rate limiting based on hashed IP)

4. Legal Basis (GDPR Art. 6)

• Performance of a contract (Art. 6(1)(b)) — processing your offer or purchase request
• Legitimate interests (Art. 6(1)(f)) — fraud prevention, security, and anonymised analytics
• Consent (Art. 6(1)(a)) — where you have explicitly agreed via the form checkbox

5. Third Parties

• Escrow.com — your email, name, and transaction details are shared with Escrow.com solely when you initiate a Buy Now purchase. Their privacy policy governs their processing.
• Cloudflare — our infrastructure and DDoS protection provider. Traffic may pass through Cloudflare's network. See Cloudflare's Privacy Policy.

We do not sell or rent your personal data to any third party.

6. Data Retention

• Offer data (email, name, amount, messages): 3 years from submission
• Order data (Buy Now purchases): 7 years to satisfy accounting and legal requirements
• Visit analytics (hashed IP, country, duration): 12 months from the visit date

7. Your Rights

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with data protection law, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

Domain sale pages do not set tracking or advertising cookies. The platform dashboard may use a session cookie solely for authentication purposes; it is not used for cross-site tracking.

9. International Transfers

Your data may be processed on servers outside your country of residence. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) for transfers outside the EEA.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after a change constitutes acceptance of the updated policy.