Privacy & cookies
Updated 9 October 2026
This notice explains how DAB handles information when you browse domains, send an enquiry or use a seller dashboard. DAB is operated by Chris Vaughan. For privacy questions or requests, email chris@c-v.org.uk.
What we collect and why
- Saved domains: if you sign in, we store your chosen bookmarks against your account identifier so you can access them on other devices. Guest bookmarks stay in browser storage. You can remove bookmarks at any time. This provides the shortlist service you request.
- Seller accounts: your sign-in identifier and email, domain ownership verification, listings, moderation history and dashboard activity needed to operate your account and prevent misuse. We use this information to provide the listing service you request and for our legitimate interests in security and accurate listings.
- Enquiries and offers: the name, email address, domain, message, offer and currency you submit. We send these to the relevant seller and save them in the seller dashboard so your request can be handled. We send you an acknowledgement and store email provider identifiers and delivery status to troubleshoot delivery. DAB’s administrator can access enquiries to operate and support the service. Processing is necessary to respond to your request and for our legitimate interests in connecting buyers and sellers.
- Optional visitor analytics: with your consent, we record the domain viewed, time, approximate country, device and browser category, referring website hostname and whether a sale page or enquiry form was opened. A temporary browser-session identifier is combined with the domain, interaction type and a 30-minute window to deduplicate views. The analytics table does not store raw IP addresses, your name or email. Hosting and security services necessarily process connection information, including IP addresses.
- Security and service operation: limited request information and daily hashed IP-based rate limits help prevent spam and abuse. These are used for our legitimate interests in protecting the service, rather than advertising.
- Prospective buyer research: DAB may store relevant business names, public business contact details, source links, reasons a domain may be relevant and outreach notes. Research may use AI and needs human review. We use this for our legitimate interest in identifying relevant business buyers, subject to applicable marketing rules. Contact us to object to use of your details for direct marketing.
Who sees your information
Approved domain names, descriptions, categories, tags and asking prices are public. Your account email and enquiry details are not published in the catalogue. A seller can access enquiries and analytics for their own listings; the DAB administrator can administer the service. Sellers receiving enquiries are responsible for their own use of that information when dealing directly with buyers.
We use OpenAI’s Sites platform and Cloudflare to host and secure the service, ChatGPT sign-in for account access, and Resend to send enquiry emails. AI search sends your submitted search text and relevant catalogue information to OpenAI; domain classification and buyer research can also use OpenAI. Do not include sensitive personal information in AI search. Ahrefs receives domain names for SEO rating checks; DNS services receive domain names for ownership checks. These providers may process information outside your country under their service terms and applicable data protection arrangements. Contact us for details of the arrangements relevant to your request.
Email replies happen in your email provider. DAB does not access your inbox or synchronise replies. Links to registrars, external research and other websites are governed by those services’ own notices.
Cookies and browser storage
Essential sign-in and security functions may use cookies managed by the hosting and identity providers. They are separate from optional DAB analytics. We do not add advertising trackers.
| Storage | Purpose and duration |
|---|---|
| dab-bookmarks-v1 (local storage) | Stores domain names you choose to save, on this browser only, until you remove them or clear browser data. Used to provide your requested shortlist independently of optional analytics. Signing in lets you explicitly import these bookmarks into your private account shortlist. Account bookmarks are stored on our server until removed or your account data is deleted. |
| dab-consent-v1 (local storage) | Remembers accept or reject for up to 180 days, then asks again. Used to respect your privacy choice. |
| dab-view-session and dab-view:* (session storage) | Only after acceptance: deduplicates optional domain analytics within a browser tab session. Cleared when you reject analytics or the session ends. |
| dab-seller-preview-v1 (session storage) | Owner-only dashboard demonstration data, retained for that tab session or until reset. It does not create real seller records. |
Optional analytics are off until you accept. Rejecting does not prevent browsing, enquiries or account use. You can withdraw consent at any time using . Withdrawal stops future optional collection and clears its browser identifiers; it does not automatically delete already collected records. Your choice applies to this browser and site address.
How long we keep information
Listings and account information are retained while needed to provide and administer the service. Hiding or marking a domain sold removes its public availability but does not erase its history. Enquiries and business research are retained to support ongoing discussions, follow-up, dispute handling and service administration. There is currently no automatic expiry for those records or stored view records; displaying “last 30 days” in a dashboard is a reporting filter, not deletion. Contact us to request deletion or a retention review. We may need to retain limited information for legal obligations or a dispute. Rate-limit records expire according to their short-term security window. Providers may have separate operational-log and backup retention.
Your choices and rights
Contact chris@c-v.org.uk to request access, correction or deletion, object to processing or marketing, or ask about restriction or portability where applicable. We may need to verify your identity. You can withdraw analytics consent without affecting earlier lawful processing. Where we rely on legitimate interests, you can object and explain your circumstances. You can also complain to your local data protection authority; in the UK this is the Information Commissioner’s Office.
Please avoid sending sensitive personal information in listing descriptions or enquiries. We will update this notice when the service or its handling of information changes.