Privacy Policy

1. The short version

This Site is a catalog. It sets no cookies, runs no analytics, and has no accounts or logins. The only personal information we collect is what you type into an inquiry form, plus the ordinary server logs any website produces. We do not sell personal information, and we do not use it for advertising.

This policy explains that in full. It applies to nsfwnames.com and related pages operated by Trufaco LLC (“Trufaco”, “we”, “us”). NSFW Names is a trading name of Trufaco LLC.

2. What we collect

Information you give us

If you send an inquiry, we store what the form collects:

• your name, if you provide it;
• your email address;
• the domain name your inquiry is about, where the form captures it;
• your message;
• the type of inquiry, so we can route it; and
• the site you sent it from, because more than one of our sites shares the same inbox.

If you email or call us instead, we hold whatever you choose to send.

Information collected automatically

Our hosting and content-delivery providers record standard request data, including your IP address, the pages requested, timestamps, and your browser’s user-agent string. This is ordinary server logging, used to serve the Site and to protect it from abuse.

3. What we do not collect

Stated precisely, because it is unusual enough to be worth saying:

• No cookies. The Site sets none.
• No local storage. We write nothing to your browser’s localStorage or sessionStorage.
• No analytics or tracking. There is no Google Analytics, no tag manager, no advertising pixel, no session recording and no fingerprinting script.
• No accounts. There is nothing to log into, so we hold no passwords.
• No payment details. Payments never happen on this Site. See section 5.

4. Service providers and third parties

We use a small number of providers. Each receives only what it needs.

• Supabase hosts the database that stores our domain inventory and the inquiries you send. Inquiry contents are stored there.
• Cloudflare sits in front of the Site as a content delivery network and security layer. It processes request data, including your IP address, in order to route and protect traffic. It also delivers each inquiry to our inbox as an email.
• Google Fonts serves the typefaces the Site uses. Because those files are requested from fonts.googleapis.com and fonts.gstatic.com, your IP address is disclosed to Google when a page loads. We do not send Google anything else, and we receive no analytics in return. We may self-host these fonts in future to remove this.
• GoDaddy LLC and Afternic handle marketplace listings, escrow and lease-to-own. If you transact there, you deal with them directly under their privacy policy, and we receive only what they pass to us to complete the sale.

We do not use service providers for advertising, profiling or data enrichment.

5. How we use it, and why

• To answer your inquiry and negotiate a possible sale. Without this we cannot reply to you.
• To complete a transaction you have asked for, including passing what is necessary to an escrow provider or registrar.
• To keep records of dealings and completed sales, which we need for accounting and tax.
• To operate and secure the Site, including detecting abuse.

Where the GDPR applies, our legal bases are: performance of a contract or steps taken at your request, for answering inquiries and completing sales; legal obligation, for accounting records; and legitimate interests, for operating and protecting the Site. We do not rely on consent, because we set no cookies and run no tracking.

6. How long we keep it

We keep inquiries for 24 months from your last contact with us, then delete them, unless we need to keep them longer for an active negotiation, a completed transaction, or a legal or tax obligation. Records of completed sales are kept for as long as accounting and tax rules require. Server logs are kept for the shorter periods our infrastructure providers apply.

7. We do not sell your information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not trade or rent contact details to anyone.

We disclose personal information only to the providers listed in section 4, to professional advisers where necessary, where the law requires it, or in connection with a sale or reorganization of our business - in which case the recipient would be bound by this policy.

8. Your choices and rights

You can ask us to give you a copy of what we hold about you, correct it, or delete it. Email info@trufaco.com and we will respond within 30 days. We may need to confirm your identity before acting, which usually means replying from the address you contacted us on.

Because we run no marketing automation, there is no mailing list to unsubscribe from. If you ask us to stop contacting you, we will.

9. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and why, to request a copy of it, to request correction or deletion, and not to be discriminated against for exercising those rights.

The categories we collect are identifiers (name, email address, IP address) and commercial information (the domain you inquired about and the content of your message). We collect them for the purposes in section 5, from you directly and from ordinary server logs. We do not sell personal information and we do not share it for cross-context behavioral advertising, including for anyone we know to be under 16. We do not collect sensitive personal information as that term is defined by the CPRA, and we do not use personal information to profile you or make automated decisions about you.

To exercise a right, email info@trufaco.com. You may use an authorized agent; we will ask for proof of authorization.

10. Visitors outside the United States

We are based in the United States and our providers may process data in the United States and elsewhere. If you are in the European Economic Area, the United Kingdom or Switzerland, your information may be transferred outside your country. Where the GDPR applies you also have the right to object to processing based on legitimate interests, the right to data portability, and the right to complain to your local supervisory authority. Transfers to our providers rely on their standard contractual clauses.

11. Security

The Site is served over HTTPS. Inquiries are stored in a managed database with access restricted to us, and credentials are held outside the published site. No system is perfectly secure, so we cannot guarantee absolute security - please do not send us anything highly sensitive through a web form.

12. Children

The Site is for adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has sent us information, email us and we will delete it.

13. Changes to this policy

If we change this policy we will update the “Last updated” date at the top of this page. If a change is significant - for example if we start using analytics or set cookies - we will say so prominently on the Site.

14. Contact

Trufaco LLC
San Diego, California, United States
Email: info@trufaco.com
Telephone: +1 858 634 2536

For anything about this policy, or to exercise a right, email us with “Privacy” in the subject line.