Privacy Policy

Effective date: 2 November 2026

Welcome to CheckDomainRating.com, owned and operated by Two Phase, LLC (“CheckDomainRating.com”), a Wyoming company. We are committed to protecting your privacy and handling your personal information safely and responsibly. This Privacy Policy sets out what we collect, how it is used, and the steps we take to protect it. It incorporates the Terms of Service available on this website unless otherwise noted.

By accessing and using our service you accept and agree to be bound by this policy and any other agreement published on this website or any website owned and operated by CheckDomainRating.com (collectively, the “Policies”).

1. Our no-log policy for domain lookups

The checker and the browser extension send us one hostname at a time so we can look up its rating. That hostname exists only in memory, for the length of the request. We do not write it to a log file, a database table, an analytics tool, a cache, or an error report. There is no table recording who looked up what, and no way for us to reconstruct one. We do record that a lookup happened, as section 2(e) describes, and that record has no place for a domain in it.

This is engineered rather than merely promised. Specifically:

• Extension API requests are excluded from request logging entirely.
• Hostnames are filtered out of parameter logging everywhere else.
• The database is configured not to log statements.
• Rate limits are counted against your session or API key, never against a domain.
• The extension's own cache lives in your browser's memory and is gone when it restarts.
• No error report we generate includes a looked-up hostname.

A consequence worth stating plainly: because we keep nothing, we cannot produce a history of your lookups for you either, and we cannot produce one for anybody else who asks, including under legal process.

2. Information we collect

a. Account information

Your email address, and the dates you first and last signed in. We do not collect or store a password, because there is none: signing in means following a link we email you. We do not ask for your name. If you signed up on one of our offer pages, we note which one (the free sample or the free API key), and we record when you first followed a link we emailed you, which is how we know the address is really yours.

b. Billing information

If you licence the bulk dataset we collect your company name, billing address, an optional VAT or tax identification number, and the invoices raised against them. We never see or store card or bank account details: payment is by bank transfer made directly by you.

If you take the monthly plan, Paddle takes the payment as our reseller and merchant of record. You give your card or other payment details, and your billing country and address, to Paddle in its checkout, not to us. We give Paddle your email address and a reference to your account so the payment is matched to it, and we keep the references Paddle gives us back: a customer reference, a subscription reference, its status, and the dates it started, renews and ends. Your receipts come from Paddle, and Paddle handles that information under its own privacy notice.

c. Usage counters

To enforce the free checker allowance we keep a counter against your account identifier or IP address. The counter holds a number and nothing else, and it expires within 24 hours. It does not record what was checked. A check may cover a list of up to 10,000 domains, and the counter still holds only the number of checks, never their size or their contents. A free API key has a daily allowance counted the same way: one number against your account identifier, which expires at midnight UTC and never records what was looked up.

d. Lists you check

A list of ten thousand domains takes longer to answer than a single request can wait, so the list is held briefly while it is worked on. It is stored under a random identifier that says nothing about its contents, it is deleted the moment the work begins, and the answer that replaces it is deleted automatically ten minutes later. Neither is ever written to disk, ever logged, or ever findable by asking about a domain: there is no way to search this for a site, only to hold the identifier you were given. A list sent to the data API is answered inside the request and is not held at all, and so is one an AI assistant sends through the MCP connection, which is the data API by another door: the same limits and the same absence of any record. When you connect an assistant by signing in, we keep the name it gave itself, the address it returns to and when you approved it, so that you can see it on your account page and disconnect it there. The exclusions in section 1 apply to every domain in a list exactly as they apply to a single one.

e. Lookup records

Each time the checker or the browser extension looks something up, we record that it happened: the time, whether it came from the checker, the Chrome extension or the Firefox add-on, how many domains it covered, whether the person asking was signed in, the IP address it came from, the country that address is in, and the user agent string the browser sent. It never includes the domains themselves, and it is not stored against your account. We use it to understand how the service is used and to spot abuse, and we keep it only for as long as it serves those purposes.

f. Technical information

Our servers process IP addresses in order to deliver responses, to apply rate limits and to keep the lookup records described above. Ordinary web server logs may record request paths and IP addresses, subject to the exclusions in section 1.

We count visits with Privatus Analytics, which sets no cookie, keeps nothing in your browser and gives you no identifier. Because of that it runs on every page without asking. For each page it records the address of the page (with anything in it that could identify a person or a link we emailed replaced by a placeholder), the site you came from, your country, your browser's language, the kind of device, browser and operating system, a rough screen size, how long the page was open and how far down it was scrolled, how quickly it loaded, which button or link was pressed (the element, never its text or anything you typed), and that something happened: a form was sent, a file was downloaded, a link to another site was followed, a sign-in link or an API key was asked for, or a check was run, with how many domains it covered and never which. Your IP address and user agent are used in memory to tell one visit from another within a single day and are not stored, so a visit cannot be tied to you or followed from one day to the next. If your browser sends the Global Privacy Control signal, your visit is not counted at all.

With your consent, we also use Google Analytics to understand how the site is used: it records the pages visited, approximate location and device information, and it sets its own cookies to do so. Also with your consent, we use advertising and remarketing cookies from the platforms we advertise on, so that we can show our ads and measure which of them lead to a sign up. Neither of those is loaded at all until you agree. None of the three ever receives a domain you looked up, because a check is submitted rather than being part of the address of a page.

g. Cookies

Three kinds, and only the first is set without asking you.

• Necessary. One cookie of our own, holding a signed session identifier, set when you sign in. It is how the site knows you are you on the next page. Without it you cannot sign in, so it needs no consent.
• Analytics. Set by Google Analytics, to count visits and tell one visit from another. Only after you agree.
• Advertising. Set by the platforms we advertise on, so our ads can be shown and their results measured. Only after you agree.

We ask before anything in the second and third groups is loaded. The visit counting described in section 2(f) is in none of these groups, because it sets no cookie. Refusing is one click, exactly like agreeing, and refusing costs you nothing on this site: the checker, the extension and your account all work the same either way. Your choice is remembered in your own browser, not in a cookie of ours, and Cookie settings at the foot of every page reopens it, so you can change it or withdraw it whenever you like. Clearing your browser data forgets it, and we will ask again.

h. The weekly email

If you receive our weekly email, we record when each one was sent to you, and whether and when you first opened it, pressed its button and unsubscribed. We learn of an open because the email loads a small image from our site, and of a press because the button passes through our site on its way to where it leads. Neither address says who you are; each carries a random code that only we can match to the email we sent. We use this to see which emails are useful and which are not, and for nothing else. If your mail program blocks images, we see no open. These records are deleted with your account, and unsubscribing, from the link in any issue or your mail program's own button, stops the email.

3. How we use your information

• To provide the service: to operate and maintain its features, to authenticate you, to apply your allowance, and to respond to your enquiries.
• To bill you: to raise and send invoices, and to record payment.
• To communicate about your account: sign-in links, invoices, renewal notices and service notices. These are transactional and you cannot opt out of them while you hold an account.
• To tell you about the service: once you have confirmed your address, one short email a week, for about ten weeks, about how the rating works and how people use the data, including what the paid licence adds. We record which of these we have sent you and when. Every one has an unsubscribe link that works in one click, you can turn them off from your account page at any time, and we stop sending them once you licence the data.
• To improve and protect the service: to understand aggregate usage patterns and service health, and to spot abuse. This never involves the domains you look up.
• To market the service: to run and measure our own advertising, so we can tell which of it is worth paying for. This never involves the domains you look up.

We do not sell your personal information. We do not use your personal information to train machine learning models, and we do not share it with third-party AI tools.

4. Sharing your information

We share personal information only with the providers we need to run the service:

• Amazon Web Services (email delivery): your email address, in order to deliver sign-in links, account notices and the weekly email.
• Cloudflare (bot protection on the anonymous checker, and file storage for the dataset): technical request information. Cloudflare Turnstile does not set a tracking cookie.
• Paddle (payments for the monthly plan, as reseller and merchant of record): your email address and account reference, and whatever you enter in its checkout. Paddle never passes your card details to us.
• DigitalOcean (hosting and databases): the data described above, at rest and in transit.
• Google Analytics (usage measurement): the pages you visit on this site, approximate location and device information. Never a domain you looked up.
• Privatus Analytics (visit counting, without cookies): the pages you visit on this site, the site you came from, your country and device information, as section 2(f) describes. Never a domain you looked up.
• Advertising platforms (our own marketing): that you visited this site and, where it happens, that you signed up or subscribed, so we can measure and target our ads. Never a domain you looked up.

Each is bound by its own contractual obligations to handle data appropriately. We may also disclose information if required by law or in response to a valid request by a public authority, and we may use your data to defend or enforce a legal right arising from improper use of our site or services.

Business transfers. Your personal information may be transferred if we undergo a merger, acquisition or asset sale. In that event, any request for deletion you have made will be passed to all corporate entities involved and acted on appropriately.

5. Your data protection rights

Our services are not intended for use by minors. You must be of legal age and under no disability to consent to a contract in your jurisdiction. Any information retained from a minor will, on notification, be destroyed and access to our services discontinued.

Under the General Data Protection Regulation and comparable laws, you have rights over your data, including:

• Withdrawal of consent at any time.
• Objection to processing carried out on a basis in contravention of this policy.
• Access: to learn whether your data is being processed, obtain disclosure about the processing, and receive a copy in a structured, commonly used and machine-readable format, except where doing so would expose us to criminal or civil liability.
• Rectification: to verify the accuracy of your data and have it corrected.
• Restriction of processing in the circumstances set out in this policy.
• Erasure: to have your personal data removed from our systems.
• Complaint: to lodge a complaint with us about how your data is processed. We will provide an initial response within fourteen business days of receipt.

In all cases we retain the power to interpret and apply these rights, and the final decision on any request rests with us. We may periodically erase personal data stored in a User's account except where retention is necessary to comply with law. Once data is erased, the rights to access, erasure, rectification and portability cannot be enforced over it.

If you opt out of any part of this policy your experience of the service may be diminished, and we are not liable for any damages, direct, incidental or otherwise, caused by or related to that experience.

6. Deleting your account

Email [email protected] and we will delete your account and everything attached to it: your sign-in details, billing address, licence record and API key. Paid invoices remain in our invoicing provider's records for as long as tax law requires them. Files you have already downloaded remain in your possession and continue to be governed by the licence terms.

7. Data security and processing location

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and accidental loss, destruction or damage. We hold no password for your account, which removes an entire category of risk. However, while we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or of electronic storage is completely secure, and we cannot guarantee absolute security.

We are not responsible for breaches caused by the negligence or actions of a User, including loss of control of the email account used to sign in, or the sharing of API keys. You are solely responsible for the security of your own systems.

We process data at our own location and, at our discretion, at remote locations for our representatives, agents and vendors. Your data may therefore be transferred to a country other than your own.

8. Changes to this Privacy Policy

We may update this policy from time to time at our sole discretion. Notice of changes is given by posting the revised policy on this page and updating the effective date above.

9. Enforcement of this policy

The User agrees that provisions in this policy relating to the GDPR, CCPA or any other privacy act not recognised by a court of competent jurisdiction as defined in the Terms of Service are a statement of company practice rather than a legally enforceable provision. We are not liable for provisions that are not mandatory under applicable law. Any compensation provided for a breach does not waive this clause or confer additional legal rights on the User.

10. Independence

CheckDomainRating.com is an independent data provider and is not affiliated with, endorsed by, or sponsored by any other company. All third-party names and marks belong to their respective owners.

11. Contact us

If you have any questions about this Privacy Policy, please contact us at:

Email: [email protected]
Mailing address: Two Phase, LLC, 680 South Cache Street, Unit 100, Jackson, WY 83001, USA