Privacy Policy

Summary

NameChase collects the minimum needed to run a droplist viewer with accounts: your email address, your tier, and the watchlist and saved searches you create. We don’t sell data, don’t run advertising, and don’t track you across other sites. We count visits with a cookieless, privacy-focused analytics service, described below.

Who’s responsible

AlmostAnEngineer Ltd (registered in England and Wales, company no. 17280331; registered office 17A The Avenue, Newton Abbot, TQ12 2BZ) operates NameChase and is the controller for the personal data described here.

ICO data-protection registration is in progress and will be added here once issued. Contact: privacy@namechase.uk.

What we collect

• Email address — to create your account and send magic-link sign-in emails.
• Account attributes — your tier and role, timestamps for creation and sign-in, and when you last used the site while signed in (recorded at most once an hour, so we can tell whether the service is being used).
• Content you create — the domains on your watchlist and your saved filter searches.
• Operational logs — our hosting providers process standard request logs (including IP address) transiently for security and reliability.
• Feedback you send us — the message text, and an email address only if you choose to give one. Sending feedback doesn’t require an account, and a submission isn’t linked to your account unless you were signed in when you sent it.
• Anonymous site statistics — which pages are viewed, where visitors came from (the referring site, and any campaign tag on the link, such as which post it was in), country, browser and device type, the width of your browser window (so we know how best to lay out the droplist data), and a few named actions (for example applying a filter or requesting a sign-in link). Counted by Umami, a cookieless analytics service (listed under processors below). We derive an anonymous visitor identifier from your IP address and browser details, which can’t be reversed back to them; the IP address itself is not stored. We don’t record search text, domain names or your account, we discard everything else in the address you visited (including advertising click IDs), we don’t link these statistics to your account, and we don’t count admin visits. If your browser sends Do Not Track, nothing is counted.

Cookies

We use only strictly-necessary storage: one cookie that keeps you signed in, and your theme preference saved in your browser’s local storage. Our site statistics use no cookies and store nothing on your device, and there are no advertising or tracking cookies — so there is no consent banner to click through.

Why, and our lawful basis

We process your email and account attributes to provide the service you asked for (performance of a contract / your request to take part in the beta). Operational logging relies on our legitimate interest in keeping the service secure and available, and the same goes for anonymous site statistics: our legitimate interest in understanding whether and how the service is used so we can improve it. We’ll only email you about your account and the service, not marketing, unless you opt in. Product-update notices fall under that same "account and the service" basis — they’re on by default like any other service email, but you can turn them off from your account page.

Processors we use

• Supabase — database and authentication (stores your account and content).
• Vercel — application hosting and request handling.
• Umami (Umami Software, Inc.) — counts anonymous site statistics (see “What we collect”). It receives page and event data, never your account, email address or search text.
• Cloudflare — object storage for archived drop-list files (contains no personal data) and network services.
• Resend — sends product-update notices (each one individually, never a shared address list). Sign-in magic-link emails are sent by Supabase’s own auth service, not Resend.

Some providers process data outside the UK under appropriate safeguards.

Retention

We keep your account data for as long as your account exists. Delete your account (or ask us to) and we remove your email, watchlist, and saved searches. Provider logs age out on their own short schedules. Archived drop-list files contain only public domain names and drop times — no personal data.

Your rights & controls

From your account page you can download all your data (profile, watchlist, saved searches) and delete your account — deletion has a 14-day grace period you can cancel, after which everything is permanently removed.

You can also ask us to access, correct, export, restrict, or object to processing of your personal data by email: privacy@namechase.uk. You have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).

Changes

We’ll update this page as the service develops and note the date above. Significant changes will be flagged to signed-in users.