Domaining security and data handling
Domaining security covers three things a domain investor cares about: who can act on your account, how money moves in a sale, and what happens to your data. Your watchlists, rules and bids are private, sign-in uses a one-time code sent to your email, and every marketplace sale settles through escrow.
Account security
- Sign-in with a one-time 6-digit code sent to your email, no password to leak
- Roles on Portfolio: owner, buyer and viewer, so buyers act within budgets
- SSO (SAML), SCIM provisioning and granular roles on Enterprise
- Audit log on Enterprise for every backorder, bid, listing and price change
- Sessions over HTTPS only
Your strategy stays private
Your watchlists, rules, saved searches and backorders are visible only to your account. Other members never see which names you follow or what limits your rules use. In a member auction, bidders see bids, not who placed them.
How escrow protects a sale
The buyer pays into escrow first. The seller transfers the name only after the payment is secured, and the payment is released to the seller once the transfer is confirmed. If the transfer does not happen, the buyer's payment is returned.
Data handling and the GDPR
We collect only what the service needs: your email, your account settings, your lists, rules and transactions. We do not sell personal data and we do not use advertising cookies. Email is sent through a transactional email provider acting as our processor, and every email includes an unsubscribe link. You can ask for a copy of your data or its deletion at [email protected].
Security reviews and DPA
Enterprise customers get a security review on request, a data processing agreement and a custom SLA.
Report a security issue
If you find a vulnerability, write to [email protected] with the details. We confirm receipt and keep you informed until it is fixed.