Who we are
Domaintile is run by Adam Mellor, trading as Domaintile, in the UK. Adam Mellor decides how the data on this page is used, and is the controller in data protection law. Write to hello@domaintile.com, or by post to Adam Mellor, Domaintile · Unit 121740, PO Box 6945, London, W1A 6US.
Accounts
Every page and every tool on the site work without signing up (an AI assistant needs a key, and a key needs a free account). We never ask for your name. An account is for a paid plan, or for a monthly allowance of your own instead of one shared with your network. When you sign in, we keep:
- your email address,
- your plan (Free, Lite or Pro), its status, and the customer and subscription numbers Stripe gives it,
- when you made the account and when you last signed in,
- how many times you used each capped tool this month (breakdowns, name counts and so on), kept until the end of the next month,
- how many pages of each part of the site you viewed and how many times you used each tool, a count per day, kept for 13 months (never which page, name or word),
- where you first came from, if your browser kept it (below): the other site’s name (for example google.com), a tagged link’s name, or none, with the first page you saw and the day,
- how you heard about us, if you answer when you sign up (a choice, and a short note if you write one),
- your saved names with their notes and tags, and your watchlist, so you keep them on every device and when you clear your browser,
- your portfolio: the names you own and what you add to each, such as the registrar, the expiry date, what you paid, the renewal price, your asking price, your decision (keep, sell or drop), notes and tags,
- the niches you follow, and the niches you make with their names and words.
If you also get The Weekly at the same address, we look up your account when we send it, to add your watchlist, your niches and a summary of your portfolio’s words to your copy. Nothing else joins the email list to your account.
You sign in with a link by email: it works once, for 30 minutes. To stop one mailbox getting a flood of links, we keep a one-way fingerprint of your address with the time of each link for a day. Your address never goes into our logs.
Delete your account from your account page; cancel a paid plan first. That deletes your address, your plan, your counts, your saved names, your watchlist, your portfolio, your niches and your assistant key at once. The free emails are a separate list: unsubscribe from any email to leave it.
Payments
Stripe takes the payments for Lite and Pro. You type your card on Stripe’s page, never on ours, and we never see the card number. Stripe keeps your billing details under its own privacy policy; we see what you paid, when, and whether the plan is active.
What stays in your browser
Your saved names with their notes and tags, your watchlist, recent Verify answers and your theme live in your browser’s own storage. They never reach us as a list, and clearing your browser data removes them. The generator keeps your last few answers in the open tab, so a reload shows them again; closing the tab removes them. When you sign in, your saved names and watchlist are kept with your account too (above). When you sign out, they are removed from this browser.
Your browser also keeps where you first came from: the other site’s name (or none), the first page you saw and the day. If you make an account, it goes with your sign-in email and stays with the account. The switch under “Page views” below removes it and stops it.
If you get the free emails, your browser also keeps your address and the key from your Manage emails link, so every sign-up box shows your own settings. The key opens your email settings and nothing else. Unsubscribing removes it.
What the site counts
To learn which features people use, the site counts actions, with nothing that identifies you:
- generator searches: the words and options you pick, how many names were checked and how many were open,
- single actions: a save, unsave, verify, watch, compare or CSV export, with the name or word it was for and the page it came from,
- a brief on the Describe an idea tab, as one use with the main word of its plan (for example “dog”), never the brief itself,
- page visits: one count a day for each part of the site (for example “keyword pages: 1,200”), never which page or who,
- page views your browser confirms after you first move, scroll, tap or type: one count a day for each part of the site and where the visit came from (the other site’s name only, for example google.com, a tagged link’s name, or none).
Each count also says whether a person or a crawler made it (a search engine, an AI crawler, an SEO tool, a link preview or another bot), so we can tell people’s use from robots’. We work that out from the browser’s name, the headers it sends, how it connects and its network at that moment, and keep only the kind, never the name or the network.
We store no IP address, no browser details, no full referrer (only the other site’s name), no cookie and no visitor or session ID. Rows cannot be linked to each other or to a person. When you are signed in, your own counts per day also go with your account (above). Our servers’ request logs keep the method, path, status and timing only. Cloudflare’s logs for the site keep only the error messages our code writes, never your address or your requests.
Page views
Cloudflare Web Analytics counts page views, where visitors come from and their countries. It sets no cookies and stores nothing in your browser. We use it to learn which pages people find useful. If your browser sends Global Privacy Control, it is not loaded, and the site’s own count of confirmed page views (above) is not sent. You can also turn both off for this browser here:
AI features
The idea box on the generator. Your brief goes to Cloudflare Workers AI, which turns it into groups of words; Cloudflare doesn’t train models on it. No domain name goes to the model. We don’t log or store the brief. The word plan the model returns is kept for up to 7 days in Cloudflare’s cache, filed under a one-way fingerprint (SHA-256) of the brief, so the same brief gets the same words without a new model call. The name searches it runs are counted like generator searches: the words of the plan, never the brief.
AI assistants. When you use Domaintile in Claude, ChatGPT or another assistant, the assistant’s servers call ours with only what a tool needs: a word, keywords, the letters to count, the names to check, or a text to pull names from (read once and not kept; only the names go on to our data service). We never see your chat or your account. ChatGPT also sends your language, a rough location and an anonymous user ID; we use that ID in memory to share out the rate limits fairly, and count the day’s tool calls under a one-way fingerprint of it that changes every day. Name searches from assistants are counted like generator searches, with nothing that identifies you. More on the AI page.
Your assistant key. If you make a key on your account page, we keep only a one-way fingerprint (SHA-256) of it, its last 4 characters so you can tell it apart, and when it was made and last used. We show the key once and never store it. Tool calls with your key count against your account’s monthly calls. Delete the key, or make a new one that replaces it, on your account page at any time; deleting your account deletes the key too.
Emails: Daily Movers and The Weekly
When you sign up for the free emails, we keep:
- your email address,
- your choices: Daily Movers, The Domaintile Weekly, the words on your email watchlist and the extensions you pick,
- when you signed up and confirmed, and the page you signed up on,
- for each email we send you: which email it was, whether it went out, the message number Cloudflare gives it and, if it failed, the error code. These records go after 400 days.
That’s the whole list. We don’t store your IP address or your browser, and your address never goes into our logs. We use it only to send the emails you asked for and to show that you asked for them. If emails to your address bounce, or keep failing, we take it off the list as if you had unsubscribed.
Sign-up is double opt-in: we send one email with a link, and nothing else comes until you open that link. A sign-up nobody confirms runs out after 48 hours.
- Change your emails, your watchlist or your extensions from the Manage emails link in any email.
- Every email has an Unsubscribe link, and mail apps show a one-click unsubscribe button. Either one deletes your address, your choices and the records of the emails we sent you at once.
Who handles it
Cloudflare serves the site and protects it from abuse (rate limits count requests per IP address inside Cloudflare; we never see or log the address). When you sign up for the emails, Cloudflare also passes on a one-way fingerprint of your network that changes every day, so one network cannot send a flood of sign-up emails; our server keeps it in memory for that day only. The daily caps of visitors who aren’t signed in count under a similar fingerprint that changes every day; our server keeps those counts for up to 3 days. Our own server holds the registration data, the anonymous counts above and the email list. Cloudflare Email Service sends the emails, so your address passes through Cloudflare for each one. Cloudflare Workers AI reads the briefs from the idea box. Our backups are kept with Backblaze B2. When you press Verify, open a domain breakdown or get names from the AI generator, your browser asks the extension’s registry (Verisign, Public Interest Registry or CentralNic) about that one name: whether it is taken and, on a breakdown, its registration details. If a Verify check fails, our Cloudflare Worker asks the registry for you, with only the name.
Cloudflare and Backblaze may handle data outside the UK. Where they do, the transfer is covered by UK adequacy rules (for the US, the UK-US data bridge) or by the UK’s standard contract terms for transfers.
Why we may use it
Data protection law asks for a reason for each use. Ours are:
- The emails: your consent. Unsubscribing withdraws it at once.
- Your account and plan: to give you the service you signed up or paid for.
- Rate limits, caps, the sign-up fingerprint and the VPN check: our legitimate interest in keeping the site up and stopping abuse.
- Page views: our legitimate interest in knowing which pages are useful. You can turn them off above.
- The anonymous counts: they hold no personal data.
How long we keep it
The anonymous counts are kept to show trends over time. They hold nothing personal, so there is nothing to delete for you.
Your account stays until you delete it. A free account that has never started a payment, with no sign-in and no use for 24 months, is deleted with everything in it. “Sign out everywhere” on your account page signs you out at once on that device, and on every other device within an hour. Records of payments are kept for 6 years, as UK tax law asks.
Your email address stays on the list until you unsubscribe.
After you unsubscribe or delete your account, copies stay in our backups for a short time, and then they are gone: the live backup keeps 3 days, and the daily backups keep about 90 days. The daily backups are locked for that time, so nobody can change or delete them early. We never send email from a backup, and we restore one only to recover from a lost server.
Cookies
When you sign in, we set two cookies. dt_session keeps you signed in on this device for 30 days. It holds your account number, address and plan, signed so nobody can change it. dt_in holds only “1”: it tells the page you are signed in, so your saved names and watchlist are kept with your account. Signing out removes both. Without them, signing in can’t work, so there is no cookie banner.
We set no other cookies. If you visit through a VPN or Tor, Cloudflare may first show a short check, and then sets one cookie (cf_clearance) to remember that you passed it. It is needed to reach the site, so there is no cookie banner.
What we never do
No selling, no sharing, no ads, no browser fingerprinting, no third-party trackers.
We never register names visitors search, save or verify.
Your rights
You can ask for a copy of what we hold about you, and ask us to correct it, delete it, stop using it or send it to you in a file. You can object to a use based on our legitimate interest. Write to hello@domaintile.com; we answer within one month.
Complaints
If you’re unhappy with how we handle your data, tell us first at hello@domaintile.com; we reply within 30 days. You can also complain to the Information Commissioner’s Office (ICO), the UK regulator: ico.org.uk/make-a-complaint.