// Privacy Policy

Privacy Policy

This policy explains what data the Domain Archive Project collects, why we collect it, how long we keep it, and what rights you have. We aim to be straightforward — no legal jargon.

What We Collect

Google Analytics (only if you accept cookies):

  • Page views, referring URLs, approximate location (country/city level)
  • Device type, browser, screen resolution
  • No personally identifiable information is collected by Analytics

Bot detection logs (collected automatically under legitimate interest):

  • IP address
  • User agent string
  • Requested URL and tripwire triggered
  • Country code (derived from IP)
  • Timestamp

Why We Collect It

  • Analytics: to understand how visitors use the archive and improve content
  • Bot detection: to protect the archive from unauthorized scraping, abuse, and manipulation of our domain data

Legal Basis (GDPR)

Analytics: consent — we only load Google Analytics if you click "Accept" on the cookie banner (GDPR Article 6(1)(a)).

Bot detection: legitimate interest — protecting our archive from automated abuse (GDPR Article 6(1)(f)). Bot detection logs are collected regardless of cookie consent because they serve a security purpose, not a marketing one.

Data Retention

  • Google Analytics: data retention is set to 14 months, governed by Google's data retention settings
  • Bot detection logs: automatically deleted after 90 days via a scheduled database cleanup

Third Parties

  • Google Analytics — traffic measurement (only with your consent)
  • Supabase — database hosting for bot detection logs (hosted in the EU)

We do not sell, share, or transfer your data to any other third parties.

Your Rights

Under GDPR, you have the right to:

  • Access — request a copy of any data we hold about you
  • Deletion — request that we delete your data
  • Objection — object to processing based on legitimate interest
  • Rectification — request correction of inaccurate data

To exercise any of these rights, contact us at privacy@domain-archive.org. We will respond within 30 days.

Cookies

  • cookie-consent — stored in localStorage (not a cookie), records whether you accepted or declined analytics
  • Google Analytics cookies (_ga, _ga_*) — only set if you accept analytics
  • No other cookies are used

Changes to This Policy

We may update this policy as our practices evolve. The date below reflects the most recent revision.

Last updated: 2026-03-19