Privacy Policy

This policy covers doma.in: the website at https://doma.in, the RDAP service at https://rdap.cctld.com and the associated registration records. Show Corporation operates the registry and is responsible for the data described here.

1. Information We Collect

Your account. The name and email address given by the provider you sign in with, the provider’s identifier for your account, whether your email address is verified, your language, and when you signed up and last signed in.

Registrant contacts. For each contact you create, we require only a name, an email address and a country or region. An organization, a postal address and telephone and fax numbers are optional: we retain these details only if you provide them and check their format. Contacts are kept both as you write them and in Latin script, together with whether the email address is verified and whether you have chosen to publish the contact in RDAP.

Domains. Each domain’s account, registrant contact, nameservers, DS records, statuses and dates, and a history of the changes made to it and by whom.

Orders. What was ordered, the price, the payment reference given by the payment method used, and the order’s outcome.

Balance. Your account balance and a ledger of every change to it: vouchers redeemed (identified by the last characters of the code), orders paid, refunds, and adjustments made by an administrator with the reason given. Entries in the ledger are never edited or removed.

Correspondence. Messages sent to our email addresses, such as abuse reports to [email protected] and questions to [email protected], with our notes on how they were handled.

2. Public Information

The RDAP service at https://rdap.cctld.com shows, for each domain, its status, its registration, expiry and change dates, its nameservers and its DS records. The domain pages of this website show the same information.

The registrant’s country or region is always shown. All other registrant data, such as name, organization, address, email address and phone number, is withheld and marked as redacted, unless you choose to publish the contact. If you do, the Latin-script form of the contact is shown in RDAP. You can change this choice at any time in your account.

Your account itself, including its email address, is never shown in RDAP. The nameservers and DS records you set, and anything you publish under your domain, are public.

3. How We Use Your Information

We use this data to run the registry: to register, renew, restore, lock, suspend and delete domains, to publish their delegation, to take payment from your balance and keep its ledger, to verify email addresses, to send the notices described in section 5, to keep registrant data accurate, and to deal with abuse reports, disputes and legal requests.

We collect only what is needed for these purposes. We do not sell or rent your data, and we do not use it for advertising.

4. Cookies and Logs

The website sets two cookies: a session cookie that keeps you signed in, and a cookie that remembers your language. It loads no analytics or advertising scripts.

The servers that deliver this website and the RDAP service record the IP address and browser details of requests. We use these logs to keep the services running, to limit abusive traffic and to investigate abuse.

5. Service Notifications

The registry sends verification emails for account and contact email addresses, domain expiry reminders and notices, and suspension notices for unverified contacts. Each registrant contact also receives an annual reminder to review their registration details and domains. These messages are part of the service and cannot be turned off while you hold a domain. We do not send marketing email.

The registry also sends notices about domain transfers between accounts. If you link a Telegram account and enable Telegram notifications, expiry reminders, contact-verification holds, completed orders and transfer notices are also sent through Telegram. You can turn off Telegram notifications in your account settings.

6. Information Sharing

• The sign-in provider you use, which tells us who you are when you sign in.
• Payment providers, for the orders you pay through them.
• Hosting and email providers that run our servers and deliver our mail, only on our instructions.
• DNS operators of the parent zones, which receive the nameservers and DS records of your domain.
• Law enforcement and courts, only in response to valid legal process.

We do not give the registrant’s identity to people who report abuse or complain about a domain, except as required by valid legal process. We also withhold the reporter’s identity from the domain holder unless the reporter consents.

7. Retention

Account, contact and domain data are kept for as long as you hold a domain or keep your account, and afterwards for as long as needed to deal with disputes, abuse and legal obligations. Order records and the balance ledger are kept as accounting law requires. The history of each domain is kept after the domain is released.

8. Your Rights

You can see and correct your contacts, nameservers and disclosure choice in your account. You may also request access to, correction of or deletion of your personal information. Before deleting a registrant contact, you must remove its association with any domains, for example by assigning another registrant contact. Depending on where you live, you may have further rights under local law.

Send requests to [email protected] with “Privacy” in the subject, from your account email address where possible, so that we can confirm that the request comes from you.

9. Children

The service is not directed to children. If we learn that a domain is held by a child who could not lawfully agree to these terms, we will remove the registration and delete the data, except where we must keep it for abuse handling or legal reasons.

10. Changes to This Policy

We may change this policy. Changes are published on this page with a new date.

11. Contact

• Show Corporation
• 838 Walker Road, Suite 21-2, Dover, Delaware 19904, United States
• Phone: +1 (302) 520-2333
• Email: [email protected]

This policy is published in Simplified Chinese, Traditional Chinese and English. If the language versions differ, the English version prevails.