Privacy Policy

1. Controller

domly.lt is operated by Tomas Bazys. If you have privacy-related questions or data requests, you can contact: hello@domly.lt.

2. Data We Collect

We collect only the data needed to operate this project properly.

• Inquiry data: name, email address, company, message, offer amount, domain of interest, inquiry status, and timestamps.
• Analytics data: page views, approximate device and browser details, referrer information, and usage data collected through Google Analytics only when the visitor has accepted analytics cookies.
• Security data: anti-spam and security-related request metadata used for rate limiting, fraud prevention, and admin protection.

3. Why We Collect It

• To receive and respond to buyer inquiries.
• To manage domain sale conversations and offers.
• To understand site usage and improve the website experience where analytics consent has been given.
• To protect the website from spam, abuse, and unauthorized access.

4. Legal Basis

We process inquiry data because it is necessary to respond to incoming requests and take steps before entering into a potential transaction. We process analytics data based on consent where applicable. We process security-related data based on legitimate interests in operating and protecting the service.

5. How Data Is Stored

Inquiry and operational data is stored using Supabase. Website usage analytics is processed through Google Analytics. Email notifications are sent through configured email infrastructure. Administrative access is protected with password, two-factor authentication, rate limiting, and additional server-side security controls.

6. How Long Data Is Kept

• Inquiry records are kept for as long as they remain relevant for communication, transaction history, or operational record-keeping.
• Analytics data is retained according to the settings and retention controls configured in Google Analytics.
• Security and rate-limit records may be kept for a limited period to detect abuse and protect the system.

7. Sharing

We do not sell personal data. Data may be processed by infrastructure providers that support hosting, storage, analytics, anti-bot protection, or email delivery strictly for operating the service.

8. International Processing

Depending on the infrastructure used, data may be processed outside your country. Reasonable technical and organizational measures are used to protect data in transit and at rest.

9. Security

domly.lt uses layered security measures including secured admin access, request validation, rate limiting, anti-bot protection, and strict server-side validation for sensitive actions. No method of transmission or storage is absolutely risk-free, but reasonable safeguards are in place.

10. Your Rights

Depending on your jurisdiction, you may request access, correction, deletion, or restriction of your personal data. You may also object to certain processing or request a copy of your data where applicable.

11. Contact

For privacy or data requests, contact: hello@domly.lt.