Transparency & Data Governance

Privacy Policy

How DomainCook collects, protects, and governs domain intelligence, investor portfolio telemetry, AI appraisals, and escrow transfer records.

Effective: October 2026•Version 2.4•GDPR & CCPA Compliant

Overview & Core Principles

Confidentiality and non-speculation are core tenets of DomainCook. We operate under strict zero-front-running standards: your domain searches, algorithmic valuation inputs, and portfolio targets are never used to front-run or speculate against you. This document details our data handling practices across all platform services.

Showing 8 of 8 Sections

01.0• General Scope

Scope & Platform Services

This Privacy Policy governs the collection, processing, and protection of information across the DomainCook marketplace, valuation engines, search telemetry, and portfolio escrow services.

•Applies to all registered buyers, verified asset sellers, prospective bidders, and API subscribers.

•DomainCook operates under strict zero-adware and non-speculation standards: we never license or monetize user behavioral telemetry.

•By accessing the platform or utilizing our valuation search tools, you consent to the processing practices outlined in this policy.

02.0• Data Collection

Information We Collect & Telemetry Scope

We collect strictly necessary personal, commercial, and technical telemetry required to deliver institutional domain acquisitions and maintain audit compliance.

•Account & Identity Credentials: Name, corporate entity, verified email address, phone number, and Argon2id salted password hashes.

•Transaction & Escrow Data: Purchase bids, accepted agreements, payout routing references, and registrar EPP transfer records.

•Infrastructure Telemetry: IP addresses, browser cryptographic headers, and DDoS mitigation tokens via Cloudflare Turnstile.

Data Class	Scope / Source	Purpose & Impact	Storage Protocol
Identity & Credentials	Direct User Input	Buyer/Seller authentication, KYC verification, session security	Argon2id + AES-256 Vault
Transaction Ledger	Marketplace Engine	Escrow custody, invoice generation, statutory tax reporting	Encrypted PostgreSQL (7 Years)
Search & Appraisals	Algorithmic Queries	Stateless valuation indexing without front-running	Ephemeral Cache (Purged in 24h)
Security Telemetry	Turnstile / Edge CDN	Anti-bot protection, DDoS defense, fraud prevention	Edge memory only (24 Hours)

03.0• Confidentiality

AI Valuation & Anti-Front-Running Standards

Confidentiality is fundamental to our platform. We enforce strict privacy and anti-front-running standards to protect investor inquiries.

•Zero Front-Running Guarantee: Your searched domain names, keyword queries, and appraisal lookups are never used by DomainCook or third parties to speculate or register domains.

•Stateless Evaluation: Automated AI valuation calculations operate on statistical models without retaining or selling your confidential search targets.

•Portfolio Isolation: Private watchlists and transaction negotiations are strictly confidential to your authenticated account.

04.0• Processing Basis

Data Processing & Lawful Grounds

Under GDPR Article 6 and international privacy laws, we process personal information strictly under legitimate business bases.

•Contractual Necessity: Fulfilling domain handoffs, verifying DNS cryptographic records, and settling escrow payments.

•Legal & Regulatory Compliance: Fulfilling Anti-Money Laundering (AML), ICANN transfer compliance, and tax withholding rules.

•Legitimate Interests: Maintaining platform integrity, thwarting malicious bot attacks, and improving algorithmic search speed.

05.0• Third Parties

Registrars & Third-Party Service Providers

DomainCook does not sell or rent personal information. Data is shared exclusively with certified technical partners necessary to complete transactions.

•ICANN Registrars: Transfer authorization codes (EPP) and administrative contact handles needed to execute domain push transfers.

•Payment Processors: Tokenized billing references processed through PCI-DSS Level 1 compliant gateways.

•Cloud Infrastructure: SOC-2 certified cloud hosting and database providers operating under rigorous Data Processing Agreements (DPAs).

Partner Scope	Function / Role	Data Disclosed	Security Standard
ICANN Registrars	Domain Custody & Push	Registrant contact handle, EPP auth code	EPP / RDAP TLS 1.3
Payment Gateways	PCI-DSS Processing	Tokenized payment tokens, billing name	PCI-DSS Level 1 Encrypted
Cloud Infrastructure	Primary Hosting & DB	Encrypted system storage, telemetry	SOC-2 Type II Certified

07.0• Security Architecture

Security & Cryptographic Standards

All platform communications and persistent data records are protected by defense-in-depth architectural standards.

•In-Transit Encryption: All incoming and outgoing connections enforce TLS 1.3 with strict HTTP Strict Transport Security (HSTS).

•At-Rest Encryption: Database records, automated backups, and private keys are safeguarded with AES-256 encryption.

•Credential Hashing: Passwords and sensitive tokens are hashed using Argon2id with unique cryptographic salts.

08.0• Retention Schedule

Data Retention Schedules & Purge Protocols

Data is retained only as long as necessary to satisfy operational escrow commitments and statutory audit obligations.

•Active Account Data: Maintained throughout account lifetime and purged within 30 days of verified closure.

•Transaction Receipts: Retained for 7 years to satisfy federal corporate accounting, tax, and anti-money laundering regulations.

•EPP Authorization Codes: Automatically scrubbed from transient memory 14 days following successful registrar delivery.

Record Classification	Retention Window	Trigger Event	Disposal Method
Account Profile & Keys	Account Duration + 30 Days	Account Closure Request	Cryptographic Erasure
Escrow Financial Ledgers	7 Years	Transaction Settlement	Encrypted Cold Storage
Ephemeral Valuation Logs	24 Hours	Query Completion	Automated Memory Purge

Your Statutory Privacy Rights & Escalation

Under GDPR, CCPA, and global statutory privacy regulations, you have the absolute right to inspect, correct, export, or permanently delete personal records associated with your account. For formal privacy audit requests, contact our Data Protection Officer at privacy@domaincook.com.

Read Terms of Service →Read Cookie & Storage Policy →Contact Data Protection Officer →