Privacy & Cookies Policy

Welcome to DomainBoar. We respect your privacy and are committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (GDPR), the ePrivacy Directive (2002/58/EC), and applicable Polish national legislation (including the Act on Providing Services by Electronic Means and the Telecommunications Law).

1. Data Controller

2. What Data We Process and Why

Website Analytics & Marketing
We use Google Analytics 4 (GA4) to monitor website performance, understand visitor behaviour, and optimise our marketing efforts. We have implemented Google Consent Mode V2 to ensure the highest standard of privacy. GA4 tracking and advertising cookies are active ONLY after you provide explicit consent via the "Accept All" button on our cookie banner. If you choose to reject cookies, the system respects your privacy by sending only anonymous, non-identifying signals (cookieless pings) that cannot be used to track you or target advertisements.

Domain Inquiry Submissions
When you submit an inquiry form on our website expressing interest in a domain name, we collect your name, email address, and the content of your message. This data is stored in our secure database and used exclusively to respond to your enquiry and conduct domain sales negotiations. Submission of the form constitutes a request to enter into pre-contractual discussions.

Business Correspondence
If you contact us or we contact you regarding a domain acquisition, we process your name, email address (corporate or personal), and the content of our communication for the purpose of domain sales negotiations.

B2B Outbound Outreach
We may proactively contact business representatives whose professional profile is relevant to specific domain names we offer. Each contact is individually assessed for relevance to the recipient's industry. Every outbound message includes a clear opt-out mechanism. We rely on publicly available professional contact information (e.g. from LinkedIn, company websites, or Google Maps listings) and process it on the basis of legitimate interest.

Security — IP Address Rate Limiting
To protect our website against automated abuse (e.g. login form flooding), we process the IP addresses of visitors who interact with our authentication endpoint. This processing is transient — IP addresses are held in server memory only for the duration of a 15-minute rate-limiting window and are never written to a database or log file.

3. Legal Basis for Processing

4. Data Retention

If you request erasure of your data and no legal obligation requires us to retain it, we will action your request within 30 days.

5. Data Processors & International Transfers

We use the following third-party service providers which may process personal data on our behalf. Where transfers of personal data outside the European Economic Area (EEA) occur, we rely on the EU–U.S. Data Privacy Framework (adequacy decision of the European Commission, July 10, 2023) as the legal basis ensuring an adequate level of protection.

Note on Supabase: Our database is intentionally deployed in the AWS eu-west-1 region (Ireland). Visitor inquiry data, domain portfolio data, and site configuration data are stored within the EEA and do not leave it at rest.

Note on Vercel:As our hosting and CDN provider, Vercel processes standard request metadata (including IP addresses and request logs) as part of normal infrastructure operation. This processing is governed by Vercel's Data Processing Agreement and the EU–U.S. Data Privacy Framework. Vercel does not receive the content of inquiry form submissions.

Note on Google Fonts:Although we use the Nunito typeface associated with Google Fonts, this font is self-hosted on our own servers (downloaded at build time via Next.js). Your browser does not contact Google's servers when loading fonts on this website.

More information: dataprivacyframework.gov

6. Your Rights

Under GDPR, you have the following rights:

• Access (Art. 15): Request a copy of data we hold about you.
• Rectification (Art. 16): Request correction of inaccurate data.
• Erasure (Art. 17): Request deletion where no legitimate reason to retain exists.
• Restriction (Art. 18): Request limitation of processing in certain circumstances.
• Portability (Art. 20): Receive your data in a structured, machine-readable format (applies to consent- or contract-based processing).
• Objection (Art. 21): Object at any time to processing based on legitimate interest, including B2B outreach. Upon receiving your objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Withdraw Consent (Art. 7(3)):Withdraw cookie consent at any time via "Manage Cookies" in the footer, without affecting lawfulness of prior processing.

You also have the right to seek judicial remedy before a competent court (Art. 79 GDPR).

To exercise any of these rights, contact us at: jacob@domainboar.com

We will respond within 30 days. No fee applies under normal circumstances. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse, with written reasons.

7. Right to Lodge a Complaint

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:

8. Cookie & Browser Storage Registry

Manage or withdraw your cookie preferences at any time via the "Manage Cookies" link in the footer. Note: clearing your browser's localStorage will reset the carousel hint preference.

9. Contact