Domain Monitor Hub (“Domain Monitor Hub”, “we”, “us” or “our”) provides domain monitoring and a set of free domain tools. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have under the EU General Data Protection Regulation (GDPR).
It applies to our website at domainmonitorhub.com, the free domain tools hosted on it, and the Domain Monitor Hub application at app.domainmonitorhub.com (together, the “Service”).
Domain Monitor Hub is the data controller for the personal data described here. For any privacy question, or to exercise your rights, contact us at support (at) domainmonitorhub.com.
Information we collect
- Account information. When you create an account or sign in with Google, we receive your name, email address and the profile image associated with your Google account (or the email address you use to sign in). We use this to identify you and secure your account.
- Domains and monitoring settings. The domains you add to monitor, your chosen alert thresholds, and the notification channels you configure — email addresses, webhook URLs, and Discord or Slack destinations.
- Free tools usage. When you use a free tool (WHOIS, DNS, SSL, availability or expiry), we process the domain you enter to perform the lookup. Results are cached for a short time (minutes) to reduce load. We also process your IP address to apply rate limits and prevent abuse. The free tools do not require an account.
- Messages you send us. If you use the contact form, we receive the name, email address, subject and message you submit, together with your IP address and the time of the request. We use this only to read your message and reply to it. The form is protected by Google reCAPTCHA (see below) and by rate limiting.
- Log and technical data. Like most websites, our servers automatically record technical information such as your IP address, browser type and user agent, and the date and time of your requests. This is used for security, diagnostics and keeping the Service reliable.
- Cookies and local storage. We store a small preference in your browser to remember your light/dark theme, and — in the application — an essential cookie to keep you signed in. With your consent, we also use analytics cookies (see Cookies below).
- Public domain data. To provide monitoring, we read publicly available registration, DNS and certificate data (WHOIS/RDAP, DNS records and SSL certificates) for the domains you monitor or look up. This public data may include information about domain registrants that we do not control. You should only monitor domains you own or are authorised to monitor.
How we use your information
We process personal data on the following legal bases under Article 6 of the GDPR:
- To provide the Service — creating your account, monitoring your domains, running checks and sending the alerts you set up. Legal basis: performance of a contract (Art. 6(1)(b)).
- To keep the Service secure — rate-limiting the free tools, preventing abuse and fraud, and diagnosing problems. Legal basis: our legitimate interests (Art. 6(1)(f)).
- To send service messages — sign-in and security notifications, and the alerts you asked us to send. Legal basis: contract / legitimate interests.
- To understand website usage — analytics, only if you accept analytics cookies. Legal basis: your consent (Art. 6(1)(a)).
- To comply with the law — where we are legally required to retain or disclose information. Legal basis: legal obligation (Art. 6(1)(c)).
We do not sell your personal data, and we do not use it for advertising.
Cookies and similar technologies
- Functional (always on). A local-storage entry that remembers your theme preference, and — in the application — an essential cookie that keeps you signed in. These are necessary for the Service to work and do not track you across other sites.
- Analytics (consent-based). Google Analytics — website usage analytics to understand how visitors use our service. Only loaded if you accept analytics cookies. You can accept or decline analytics on your first visit and change your choice at any time; declining does not affect your use of the Service.
We do not use advertising or cross-site tracking cookies.
How we share your information
We share personal data only with the service providers needed to run the Service, and only as far as necessary:
- Google — for sign-in (authentication), Google reCAPTCHA, and Google Analytics (only with your consent).
- Google reCAPTCHA — used on the contact form only, to tell people from bots. When that page loads, Google receives your IP address and information about your interaction with the page in order to score the request. This is necessary to keep the form usable; without it the form would be overwhelmed by automated submissions. Google’s use of this data is governed by its own privacy policy.
- Our hosting provider (located in the EU) — stores and serves the Service and keeps standard server logs.
- Discord and Slack — only if you choose to send alerts to them; in that case the alert content you configured is delivered to the channel you specify.
- Domain data sources — to perform lookups we query public infrastructure such as RDAP services, the IANA registry and DNS resolvers. We send them the domain name being checked, not your identity.
We may also disclose information where required by law, or to protect the rights, safety or security of our users and the Service.
International data transfers
Some of our providers (for example, Google) may process data on servers outside the European Economic Area (EEA). Where that happens, the transfer is protected by an appropriate safeguard, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
How long we keep your data
- Account data — for as long as your account is active, and for a short period afterwards if you close it, unless we must keep it longer to meet a legal obligation.
- Monitoring data and alert history — while you use the Service; alert history is kept for a limited period and then deleted.
- Contact messages — kept as long as needed to deal with your enquiry and any follow-up, then deleted.
- Free-tool cache — expires automatically within minutes.
- Server logs — retained for a limited period for security and diagnostics.
How we protect your data
We use reasonable technical and organisational measures to protect your data, including HTTPS encryption in transit, read-only access to the domains you monitor (we never change your domains), and abuse-prevention controls on the free tools. No method of transmission or storage is completely secure, but we work to keep your information safe.
Your rights under the GDPR
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased (the “right to be forgotten”);
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time (for example, for analytics), without affecting processing already carried out;
- lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, email support (at) domainmonitorhub.com. We will respond within one month, as required by the GDPR.
Children’s privacy
The Service is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page, and for significant changes we will provide a more prominent notice. Your continued use of the Service after an update means you accept the revised policy.
Contact us
Domain Monitor Hub is the controller of your personal data. For any question about this policy or your data, contact us at support (at) domainmonitorhub.com.