Privacy policy

1. Who is responsible for your data

The controller of your personal data is DomaineGoat LLC, an ICANN-accredited registrar incorporated in Panama, which operates Sealname ("we", "us").

Contact for any privacy question or request: [email protected]. This policy applies to sealname.com, the client area and every service described in our terms of service.

2. What we collect and why

The short version is on data we collect: one email, that's it. In detail:

• Verified email: one per domain. ICANN requires registrars to verify the registrant's email within 15 days of a registration, transfer or change for generic extensions. We use it to verify the registration, relay messages, send renewal reminders and send legal notices. It is never published and never sold.
• Account: a random 16-digit account number, which is your login. An email is optional to open an account.
• Domains and settings: your domains, nameservers, DNS records (most DNS records are public by nature, because they make your domain work), transfer lock, auto-renew and privacy switch.
• Balance and top-ups: amounts and dates. We never ask for a wallet address or a TXID: each payment is matched by its exact amount.
• Messages: if you write to support or to the abuse desk, we keep the conversation to answer you.

We never collect a name, a postal address, a phone number, an ID document, a selfie, a date of birth, card or bank details, a wallet address or a TXID.

No logs. We keep no access logs and store no IP address with your orders or requests. An IP address only serves to limit abuse, in memory, and is forgotten in less than an hour. We run no analytics. sealname.com is delivered through the Cloudflare network (CDN and DDoS protection); we do not receive or keep your IP address.

3. Legal bases

Where a data protection law such as the EU General Data Protection Regulation applies to you, we rely on these legal bases:

• Contract: to register, renew, transfer and manage your domains, and to run your account and balance.
• Legal obligation: to answer a valid Panamanian court order.
• Legitimate interests: to meet our duties as an ICANN-accredited registrar (email verification, data escrow, record keeping, abuse handling), to keep the service secure, and to handle disputes. We weigh these interests against your privacy and collect only what they need.

4. Who receives your data

We never sell your data and never use it for marketing. We share it only with:

• Registries: the registry of each extension receives the registration data it needs to register your domain. Registries are located in many countries; their own policies apply.
• The escrow agent: registrars must deposit registration data with an escrow agent (RAA §3.6). If a registrar loses its accreditation, ICANN uses that data to move its domains to another registrar.
• Dispute providers: under the UDRP or the URS, we confirm the registrant to the provider, for example WIPO.
• ICANN: for contractual duties, such as compliance requests.
• Courts: only on a Panamanian court order, limited to the data it names, as our disclosure policy explains. No foreign lawyer, private company or foreign government receives your data without Panamanian legal process.
• Urgent requests under ICANN rules: an imminent threat to life, serious bodily injury, critical infrastructure, or child exploitation. We disclose only the data needed and count the request in the transparency report.

We notify you before any disclosure, unless the Panamanian court order forbids it. Every request is counted in our quarterly transparency report. The public sees none of your contact details: where the registry allows it, public WHOIS/RDAP shows our privacy service's contact details instead of yours.

5. How long we keep your data

• Email, domains and settings: while the domain is registered with us, then for the period ICANN requires registrars to keep registration records.
• Balance and top-ups: while your account exists.
• Support messages: only as long as needed to answer you, then deleted, unless the law requires us to keep them longer.
• IP addresses and access logs: never stored.

When a retention period ends, we delete the data.

6. Cookies and local storage

We set no tracking cookies and run no analytics. The client area keeps what it needs to work, such as your session, in your browser's local storage.

The public website can also remember your language choice in local storage, so that it does not redirect you again. You can clear it at any time in your browser settings.

7. Your rights

Depending on the law that applies to you, you can ask us to:

• access the personal data we hold about you;
• correct data that is wrong — most registration data can be changed in your account, and a new email is verified again;
• delete data, within the limits of the retention duties in section 5;
• restrict or object to a use of your data;
• receive your data in a portable format.

How to use them: write to [email protected] from the verified email of your domain, so that we can confirm the request comes from you. Do not send your account number: We never ask for your password, your account number or your domain transfer (EPP) codes by email or chat. Support replies within 12 hours. You can also complain to the data protection authority of your country.

8. Keeping your account safe

Your 16-digit account number is your login. Store it in a password manager and never share it. We never ask for your password, your account number or your domain transfer (EPP) codes by email or chat. A message that asks for them is not from us: forward it to [email protected].

9. Changes to this policy

We may update this policy, for example when ICANN changes its data rules. We publish every change on this page, and the date at the top shows the latest version.

10. Contact

• Privacy questions and requests: [email protected] — Email replies within 12 hours, 7 days a week, including help with DNS, transfers and renewals.
• Abuse reports: [email protected].
• Legal requests: law enforcement.
• The field-by-field list: data we collect.