Privacy Policy
Effective date: 1 September 2026
Welcome to CheckDomainRating.com, owned and operated by Two Phase, LLC (“CheckDomainRating.com”), a Wyoming company. We are committed to protecting your privacy and handling your personal information safely and responsibly. This Privacy Policy sets out what we collect, how it is used, and the steps we take to protect it. It incorporates the Terms of Service available on this website unless otherwise noted.
By accessing and using our service you accept and agree to be bound by this policy and any other agreement published on this website or any website owned and operated by CheckDomainRating.com (collectively, the “Policies”).
The short version
We never record which domains you look up. Not in the checker, not in the browser extension, not anywhere. We hold your email address so you can sign in, and your billing details if you buy something. We do not sell personal information. We ask before loading anything that measures visits or supports our advertising, and neither ever receives a domain you looked up.
1. Our no-log policy for domain lookups
The checker and the browser extension send us one hostname at a time so we can look up its rating. That hostname exists only in memory, for the length of the request. We do not write it to a log file, a database table, an analytics tool, a cache, or an error report. There is no table recording who looked up what, and no way for us to reconstruct one.
This is engineered rather than merely promised. Specifically:
- Extension API requests are excluded from request logging entirely.
- Hostnames are filtered out of parameter logging everywhere else.
- The database is configured not to log statements.
- Rate limits are counted against your session or API key, never against a domain.
- The extension's own cache lives in your browser's memory and is gone when it restarts.
- No error report we generate includes a looked-up hostname.
A consequence worth stating plainly: because we keep nothing, we cannot produce a history of your lookups for you either, and we cannot produce one for anybody else who asks, including under legal process.
2. Information we collect
a. Account information
Your email address, and the dates you first and last signed in. We do not collect or store a password, because there is none: signing in means following a link we email you. We do not ask for your name.
b. Billing information
If you licence the bulk dataset we collect your company name, billing address, an optional VAT or tax identification number, and the invoices raised against them. We never see or store card or bank account details: payment is by bank transfer made directly by you.
c. Usage counters
To enforce the free checker allowance we keep a counter against your account identifier or IP address. The counter holds a number and nothing else, and it expires within 24 hours. It does not record what was checked. A check may cover a list of up to 10,000 domains, and the counter still holds only the number of checks, never their size or their contents.
d. Lists you check
A list of ten thousand domains takes longer to answer than a single request can wait, so the list is held briefly while it is worked on. It is stored under a random identifier that says nothing about its contents, it is deleted the moment the work begins, and the answer that replaces it is deleted automatically ten minutes later. Neither is ever written to disk, ever logged, or ever findable by asking about a domain: there is no way to search this for a site, only to hold the identifier you were given. A list sent to the data API is answered inside the request and is not held at all. The exclusions in section 1 apply to every domain in a list exactly as they apply to a single one.
e. Technical information
Our servers process IP addresses in order to deliver responses and to apply rate limits. Ordinary web server logs may record request paths and IP addresses, subject to the exclusions in section 1. With your consent, we use Google Analytics to understand how the site is used: it records the pages visited, approximate location and device information, and it sets its own cookies to do so. Also with your consent, we use advertising and remarketing cookies from the platforms we advertise on, so that we can show our ads and measure which of them lead to a sign up. Neither is loaded at all until you agree, and neither ever receives a domain you looked up, because a check is submitted rather than being part of the address of a page.
f. Cookies
Three kinds, and only the first is set without asking you.
- Necessary. One cookie of our own, holding a signed session identifier, set when you sign in. It is how the site knows you are you on the next page. Without it you cannot sign in, so it needs no consent.
- Analytics. Set by Google Analytics, to count visits and tell one visit from another. Only after you agree.
- Advertising. Set by the platforms we advertise on, so our ads can be shown and their results measured. Only after you agree.
We ask before anything in the second and third groups is loaded. Refusing is one click, exactly like agreeing, and refusing costs you nothing on this site: the checker, the extension and your account all work the same either way. Your choice is remembered in your own browser, not in a cookie of ours, and Cookie settings at the foot of every page reopens it, so you can change it or withdraw it whenever you like. Clearing your browser data forgets it, and we will ask again.
3. How we use your information
- To provide the service: to operate and maintain its features, to authenticate you, to apply your allowance, and to respond to your enquiries.
- To bill you: to raise and send invoices, and to record payment.
- To communicate about your account: sign-in links, invoices, renewal notices and service notices. These are transactional and you cannot opt out of them while you hold an account.
- To improve the service: to understand aggregate usage patterns and service health. This never involves the domains you look up.
- To market the service: to run and measure our own advertising, so we can tell which of it is worth paying for. This never involves the domains you look up.
We do not sell your personal information. We do not use your personal information to train machine learning models, and we do not share it with third-party AI tools.
4. Sharing your information
We share personal information only with the providers we need to run the service:
- Zoho Books (invoicing): your name or company name, billing address, tax identification number and email address, in order to raise and send your invoice.
- Amazon Web Services (email delivery): your email address, in order to deliver sign-in links and account notices.
- Cloudflare (bot protection on the anonymous checker, and file storage for the dataset): technical request information. Cloudflare Turnstile does not set a tracking cookie.
- DigitalOcean (hosting and databases): the data described above, at rest and in transit.
- Google Analytics (usage measurement): the pages you visit on this site, approximate location and device information. Never a domain you looked up.
- Advertising platforms (our own marketing): that you visited this site and, where it happens, that you signed up or subscribed, so we can measure and target our ads. Never a domain you looked up.
Each is bound by its own contractual obligations to handle data appropriately. We may also disclose information if required by law or in response to a valid request by a public authority, and we may use your data to defend or enforce a legal right arising from improper use of our site or services.
Business transfers. Your personal information may be transferred if we undergo a merger, acquisition or asset sale. In that event, any request for deletion you have made will be passed to all corporate entities involved and acted on appropriately.
5. Your data protection rights
Our services are not intended for use by minors. You must be of legal age and under no disability to consent to a contract in your jurisdiction. Any information retained from a minor will, on notification, be destroyed and access to our services discontinued.
Under the General Data Protection Regulation and comparable laws, you have rights over your data, including:
- Withdrawal of consent at any time.
- Objection to processing carried out on a basis in contravention of this policy.
- Access: to learn whether your data is being processed, obtain disclosure about the processing, and receive a copy in a structured, commonly used and machine-readable format, except where doing so would expose us to criminal or civil liability.
- Rectification: to verify the accuracy of your data and have it corrected.
- Restriction of processing in the circumstances set out in this policy.
- Erasure: to have your personal data removed from our systems.
- Complaint: to lodge a complaint with us about how your data is processed. We will provide an initial response within fourteen business days of receipt.
In all cases we retain the power to interpret and apply these rights, and the final decision on any request rests with us. We may periodically erase personal data stored in a User's account except where retention is necessary to comply with law. Once data is erased, the rights to access, erasure, rectification and portability cannot be enforced over it.
If you opt out of any part of this policy your experience of the service may be diminished, and we are not liable for any damages, direct, incidental or otherwise, caused by or related to that experience.
6. Deleting your account
Email [email protected] and we will delete your account and everything attached to it: your sign-in details, billing address, licence record and API key. Paid invoices remain in our invoicing provider's records for as long as tax law requires them. Files you have already downloaded remain in your possession and continue to be governed by the licence terms.
7. Data security and processing location
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and accidental loss, destruction or damage. We hold no password for your account, which removes an entire category of risk. However, while we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or of electronic storage is completely secure, and we cannot guarantee absolute security.
We are not responsible for breaches caused by the negligence or actions of a User, including loss of control of the email account used to sign in, or the sharing of API keys. You are solely responsible for the security of your own systems.
We process data at our own location and, at our discretion, at remote locations for our representatives, agents and vendors. Your data may therefore be transferred to a country other than your own.
8. Changes to this Privacy Policy
We may update this policy from time to time at our sole discretion. Notice of changes is given by posting the revised policy on this page and updating the effective date above.
9. Enforcement of this policy
The User agrees that provisions in this policy relating to the GDPR, CCPA or any other privacy act not recognised by a court of competent jurisdiction as defined in the Terms of Service are a statement of company practice rather than a legally enforceable provision. We are not liable for provisions that are not mandatory under applicable law. Any compensation provided for a breach does not waive this clause or confer additional legal rights on the User.
10. Independence
CheckDomainRating.com is an independent data provider and is not affiliated with, endorsed by, or sponsored by any other company. All third-party names and marks belong to their respective owners.
11. Contact us
If you have any questions about this Privacy Policy, please contact us at:
Email: [email protected]
Mailing address: Two Phase, LLC, 680 South Cache Street, Unit 100, Jackson, WY 83001, USA