The short version: we collect only what we need to run your names. We never see your password, we don't show ads, and we don't sell your data.
What we collect
- Your email address, to log you in and send password resets, payment confirmations and renewal reminders.
- A scrambled version of your password. Your browser scrambles it before it's sent, and we scramble it again. We never receive or store the password itself.
- Your names and their settings: page text, where they point, and any DNS records you add.
- IP addresses, briefly, to stop password guessing and spam reports. Login attempts are deleted after a day.
- Abuse reports, including the reporter's IP address, so we can review them.
What we don't do
- No ads and no ad trackers
- No selling or renting your data
- No reading what's on the websites your names point to
Cookies
We use one cookie to keep you logged in. It can only be read by safe.gm itself, not by websites on other safe.gm names. If bot protection is switched on, Cloudflare Turnstile may set its own cookie to tell people from bots.
Who helps us run safe.gm
- Netlify hosts this website and our servers.
- Neon stores our database.
- Cloudflare serves customer names, runs DNS and provides bot protection.
- Resend sends our emails.
They process data only to provide their services to us.
Public information
Your names, your page text and your DNS records are public by nature: anyone can look them up or visit them. Your email address is never shown publicly.
How long we keep data
- Account data: while your account is open
- Expired names: deleted 30 days after expiry
- Unpaid reservations: deleted after 72 hours
- Password reset links: 1 hour
Your choices
You can change or delete your names any time. You can delete your whole account from the bottom of your dashboard. This removes your email, your names and their DNS records right away. You can also ask us for a copy of your data.