DomainsMesh
Legal

Privacy Policy

Last updated: August 28, 2026

Short version: We collect very little data. Most of our tools work without any account, and your search history stays in your own browser.

1. Overview

DomainsMesh ("we", "us", or "our") operates the website at domainsmesh.com. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data. We are committed to being transparent and keeping your data minimal.

2. Information We Collect

2.1 Information you provide

We do not require you to create an account to use the public tools. We collect your email address, and optionally your name, only if you create an account for Domain Monitor — or if you voluntarily email us at one of the addresses on our Contact page.

2.2 Automatically collected data

When you visit our website, standard web server logs may record:

  • Your IP address
  • Browser type and version
  • Pages visited and time spent
  • Referring URL
  • Device type and operating system

Where we store any of this ourselves, the IP address is hashed first — see section 2.3. Transient server logs may hold a raw address for operational and abuse-prevention purposes.

We use this data for security, performance monitoring and aggregate analytics. We do not sell your personal information.

2.3 Tool usage analytics

When you run one of our tools, your browser sends a usage event to our own analytics endpoint. This is first-party: the data goes to our own server. (Google Analytics runs separately and is described in section 3.) Each event records the tool used, the query text, any extensions selected, how many results came back, whether the lookup succeeded, how long it took, the page path, your browser's user-agent and referring URL, and a two-letter country code. If you click one of the results, we also record which result you chose and its position in the list.

We do not store your IP address alongside these events. The address is passed through a salted SHA-256 hash and only that hash is written to the database, so repeat visits can be counted without the raw address being retained. The salt is a server-side secret and is never published.

Bear in mind that the query itself is stored. Please do not enter personal information into a domain, DNS or IP lookup field — enter the domain or address you want to check and nothing more.

2.4 Local browser storage

We store one value in your browser's localStorage: dm-theme, which remembers your light/dark mode choice. It never leaves your device and is not transmitted to our servers. You can clear it at any time by clearing your browser data.

3. Cookies, Analytics & Advertising

DomainsMesh uses very few client-side technologies. Our Cookie Policy covers each one in full detail.

  • Preferences — stored in localStorage as dm-theme to remember your light/dark mode choice. This never leaves your device.
  • Authentication — if you create an account and sign in, a session cookie is set so that you stay signed in between pages. It is strictly necessary for the signed-in area to function and is not used for analytics or advertising. Signed-out visitors are not given a session cookie.
  • Analytics — two systems. Google Analytics 4 measures audience and traffic and sets its own cookies (see the Cookie Policy for names, lifetimes and how to opt out). Our own first-party analytics, described in section 2.3, runs on our servers and sets no cookies at all. We do not use Vercel Analytics or any other third-party analytics service.
  • Advertising — we do not currently serve advertising on this site, and no advertising or ad-targeting code is loaded. Should that change, we will update this policy and the Cookie Policy before any ad code is deployed.

4. Affiliate Links

Some registrar links on DomainsMesh are affiliate or referral links. When you follow one and make a purchase, we may receive a small commission from the provider at no extra cost to you. Which registrars this covers is set out on our Affiliate Disclosure page.

Affiliate links are routed through our own domain (/go/[registrar]) so that the destination URL is not exposed in your browser before you click. We record that the click happened — the registrar, the hashed IP described in section 2.3, and the time — so we can tell which tools are useful. The provider's website may set its own cookies when you land on their page; their privacy policies apply from that point forward.

5. Third-Party Services

DomainsMesh uses the following third-party services to operate:

  • Cloudflare DNS (1.1.1.1) — DNS queries are forwarded to Cloudflare's DNS-over-HTTPS resolver. Cloudflare's privacy policy applies to these requests.
  • Verisign RDAP / IANA RDAP — WHOIS lookups query public RDAP endpoints. No personal data is sent; only the domain name you look up.
  • Google Public DNS (8.8.8.8) — used as a secondary DNS-over-HTTPS resolver when Cloudflare does not answer.
  • Google Analytics 4 — aggregate audience and traffic measurement. Receives page and event data, including a Google-set identifier stored in your browser. How Google uses data from sites that use its services.
  • Verisign NameStudio — our three name generators forward your keyword or description, and the selected extensions, to Verisign's name suggestion API. No account or identity data is sent with it.
  • ipwho.is — our IP Lookup tool sends the IP address you ask about to this provider to retrieve network ownership and approximate location. If you use the "my IP" option, the address being looked up is your own.
  • Public blacklist (DNSBL) operators — the Blacklist Checker queries a list of public blocklist zones about the domain or address you enter. The query is carried over DNS-over-HTTPS.
  • The host you are checking — the SSL Checker opens a direct TLS connection to the hostname you enter in order to read its certificate. That server will see a connection from us, not from you.

We do not use Vercel Analytics, Google AdSense, or any advertising service. Each provider listed above processes data under its own privacy policy. We do not control, and are not responsible for, their practices.

6. Data Retention

Usage events described in section 2.3 are currently kept for as long as the service operates; we do not presently run an automatic deletion schedule for them. They contain no raw IP address and no account identifier for signed-out visitors.

If you hold an account, the data associated with it — your email address, the domains you monitor, and their check history — is kept for as long as the account exists. Deleting your account removes it.

You can ask us to delete data associated with you at any time under section 7. We will update this section if and when a scheduled retention period is introduced, rather than state one that is not enforced.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict our processing of your data
  • Data portability

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

DomainsMesh is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of DomainsMesh after any changes constitutes your acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy, please contact us at [email protected] or through our contact page.