Privacy Policy

This policy explains what personal data dcs4.com (the "Service") collects, why we collect it, and the choices you have. We collect only what we need to run the Service, and we never sell your data.

What we collect

• Account details: your name, email address, and a hashed password (when you sign up with email).
• Google sign-in: when you sign in with Google, Google shares your name, email address, and profile picture with us, along with an identifier for your Google account. We don't get access to your Gmail, contacts, Drive, or any other Google data.
• Registrant contact details: your name, address, phone number, email, and optional business details. You give us these on your profile so we can register domains.
• Activity: the domains you watch, snipe, buy, and own; your notifications; and your AI chat conversations.
• Billing: your purchase and subscription history. Stripe handles your card details. We never see or store them.
• Technical data: your IP address and browser user agent, recorded with your login sessions and used for security and rate limiting.

How we use it

• to create your account and keep you signed in;
• to register, renew, and manage the domains you buy or snipe;
• to process payments and refunds;
• to send emails about your account and orders, such as verification, password resets, snipe results, renewal reminders, and watch alerts;
• to answer your chat questions;
• to prevent abuse and keep the Service secure.

We don't use your data for advertising and we don't sell it.

Google user data

We use the profile information Google shares with us only to create your account and sign you in. We don't share it with third parties, except for the service providers listed below who help us run the Service, and we don't use it for advertising. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can revoke dcs4.com's access at any time from your Google Account settings.

Who we share it with

We share data only with the service providers who run parts of the Service for us:

• Spaceship (domain registrar): registrant contact details, so it can register and manage your domains. Registry and ICANN rules may require the registrar to keep this data or publish it in WHOIS/RDAP.
• Stripe (payments): your email address and payment information.
• Cloudflare (email delivery and bot protection): your email address and the content of the emails we send you; on sign-in, browser signals for the Turnstile captcha.
• OpenRouter and the AI model providers it uses: your chat messages, so they can generate answers.
• Google: only if you choose to sign in with Google.

We may also disclose data if the law requires it.

Cookies

We use only essential cookies, the ones that keep you signed in. We don't use advertising or third-party tracking cookies.

Retention

We keep your data while your account is open. If you ask us to delete your account, we delete your personal data. The exceptions are records we must keep for legal, tax, or registrar reasons, such as payment and registration history.

Your rights

You can access, correct, export, or delete your personal data. You can update your profile in settings. For anything else, email [email protected] and we'll respond within 30 days.

Security

Passwords are hashed, all traffic is encrypted over HTTPS, and access to production data is restricted. No system is perfectly secure, but if a breach affects you, we'll tell you promptly.

Changes

We'll post any updates here and change the "last updated" date. If a change is significant, we'll also email you.

Contact

Privacy questions: [email protected]. See also our Terms of Service.