Privacy

What dotsweep records and what it refuses to: the extension you searched, never the name. No account, no cookies, no cross-site tracking.

The one rule everything else follows

Checking newproduct.com tells us a business plan you have probably told nobody else. A store of names, times and addresses is a store of unannounced startups, so we do not keep one. The extension you asked about is recorded; the name is not. .io is a fact about the market. stripe-competitor.io is somebody's secret.

This is enforced in the code rather than by intention: the extension is derived at the point of recording, so there is no place in the request path where the full name sits next to the call that writes the measurement.

We do not front-run your searches

dotsweep does not track or monitor the names you look up. We would never abuse your trust by monetising your domain searches, and we do not register names you have checked — not for ourselves, not for a partner, not to resell them back to you. A name you check here is a name you can still buy, at the price the registry charges, from whoever you like.

This is a promise the design keeps rather than one you have to take on trust: the name is never written down, so there is no list of searched names here for anyone to mine, sell or act on — including us. The registry is asked and the label is discarded.

What is recorded

One row per request, with these fields and no others:

What is not recorded

• The domain name you searched. Not in the measurement rows, not in an access log we keep, not anywhere we can query.
• Your IP address, and no identifier derived from it. There is no visitor id, no session id and no fingerprint, so two searches by the same person cannot be joined together.
• Your browser's user-agent string. Only the four-way bucket above is kept; the string itself is high-cardinality and identifying, which is exactly what the rest of this page avoids.
• Cookies. The site sets none, for any purpose, and there is no consent banner because there is nothing to consent to. This is a statement about this site, and it stops at the moment you leave it: a registrar you click through to will set its own, including one that records that we sent you. That happens on the registrar's domain and its network's, under their terms, and it is described under "Who else sees anything" below.
• Anything from a third party. No tracking script, no tag manager, no embedded fonts, no advertising pixel. The pages load nothing from any host but this one, so nobody else observes your visit. The counting described above happens on our own server, from the request itself.

Accounts

There are none. The website, the API and the MCP server all work without a signup, a key or a token, so there is no name, email address or password here to lose.

Where it is stored, and for how long

• Measurements go to Cloudflare Analytics Engine and are deleted after three months. They are aggregate rows in the shape above, and because no field identifies a person, an individual visit cannot be retrieved from them — by us or by anyone asking us.
• Answers are cached at Cloudflare's edge, keyed by the domain that was asked about, so a popular lookup is fast. The cache holds the answer, not who asked for it, and expires by itself.
• Your own settings — extensions, saved names, light or dark — live in your browser's local storage and are never sent anywhere. Clearing your browser data deletes them and we never had a copy. A saved name is checked against the registries when you open the list, as the same anonymous lookup as any other.

How this is funded

There is no account and no subscription, so the money has to come from somewhere and it is worth saying exactly where. Some registrars pay us a commission when somebody buys through a link we carry. Those links are marked paid wherever they appear — on the row in the buy panel, in the footer, and as paid: true in the API. It costs you nothing extra; the price is the registrar's own price.

What that money is not allowed to buy is the answer. Three rules follow, and each is enforced somewhere a reader can check:

• The ranking is by cost, not by commission. Registrars are ordered cheapest renewal first, in one currency, and the order is decided on the server by the same code the CLI runs. A paid link that is dearer sits below a free one that is cheaper.
• A price is never moved onto a different registrar's link. Exactly one entry is marked quoted, and that is the registrar whose number is on screen. A partner is an additional labelled row, never a silent substitution behind somebody else's figure.
• Availability does not know about any of it. Whether a name is free is answered before commercial data is attached, and no partner is consulted to decide it. A registrar cannot pay to have a name reported taken, or free.

Who else sees anything

• Domain registries. Answering "is this name free" means asking the registry that would sell it, over DNS, RDAP or WHOIS, and that query necessarily contains the name. This is inherent to the question and true of every checker, including a whois command you run yourself. Our requests identify this service, not you: no part of your request — address, browser or country — is passed on.
• Cloudflare hosts the service and terminates the connection, under its own privacy terms.
• Porkbun supplies the wholesale price list. It is fetched on a schedule by the server itself and carries nothing about any visitor.
• Registrars, when you click a Buy link. The hop sends no-referrer deliberately, so the registrar does not receive the URL you came from — which would otherwise hand them the name you searched.
• A registrar's affiliate network, on a click and only on a click. A link marked paid passes through impact.com on its way to the checkout, which sees your address, browser and the domain you are being sent to buy, and sets a cookie on its own domain so the registrar knows the sale came from us. Nothing loads it until you click, and what returns to us is a count of sales, never a list of buyers.
• Nobody else. Nothing is sold, shared for advertising, or handed to a data broker. There is no adtech on the page and none in the request path — the paragraph above is a redirect you chose to follow, not a tracker that ran while you read.

If you use the MCP connector

Everything above applies unchanged. A connector runs on the assistant vendor's infrastructure and calls this server from there, so the lookup arrives here the same way a browser's would, and is measured the same way: extension, never the name. This server is never sent your conversation, and it asks for no access to your files, memory or chat history.

Children

This is a tool for registering domain names and is not directed at children. No age is collected because no personal data is collected.

Your rights

Access, correction and deletion requests are the normal shape of this section and we cannot honour them in the usual way, for a good reason: nothing stored here is linked to you, so there is no record to look up, correct or delete. The one thing that is yours is in your own browser, and clearing site data removes it. If you believe something here is wrong, write to us — see below.

Changes

A change to what is recorded is a change to this page, in the same commit as the change to the code. Material changes will be described here rather than made quietly.

Contact

Questions about this policy, or about anything the service holds: support@dotsweep.com. Registry operators who want us to slow down or stop can use the same address, or abuse@dotsweep.com; both reach the same inbox and a human reads them.

Written to be checkable rather than reassuring. What is recorded is decided in one file, analytics.ts, and the table above is that file's field list.