Privacy Policy

Last updated 3 September 2026

This explains what Domain Medic collects when you use the service, why, and what happens to it.

What we collect

• The domain name you submit. This is looked up against public DNS, certificate transparency, and domain registration services to produce your report.
• Scan results. Stored so your report remains accessible at its URL.
• A hashed version of your IP address. We never store your raw IP. It's salted and one-way hashed, kept only to enforce rate limits and curb abuse of the service.
• Payment and email details, via Stripe. Payment is processed entirely by Stripe; we do not receive or store your card number. The email address you give Stripe at checkout is used for your payment receipt and, where applicable, to send you your report link.

What we don't do

We don't sell your data. We don't use the domains you scan for marketing. We don't compile scan data across customers into any product without aggregating and anonymising it first.

Third parties involved in delivering the service

• Stripe - payment processing
• Vercel - application hosting
• Neon - database hosting (PostgreSQL)
• Cloudflare, crt.sh, and domain registry RDAP services - the domain name you submit is sent to these public, third-party lookup services as a normal part of running the checks (this is how DNS and certificate-transparency lookups work - the same information is visible to anyone who queries these public services directly)

Cookies

While the service is in private access, we set one cookie to remember that you've entered a valid access code. It contains no personal data - just a signed token proving the code was correct - and is used purely to gate access, not for tracking or analytics.

How long we keep data

Scan results are kept so report links continue to work. Rate-limit records (the hashed IP) are kept only for the duration of the rate-limit window and are not retained long-term. You can request deletion of a specific scan's data - see below.

Your rights

Under UK GDPR, you can ask us what data we hold about a scan you paid for, and ask us to delete it. Contact us using the details below.

Contact

privacy@domainmedic.co.uk (set this mailbox up once your email is live).