How we use your details.

This website is operated by TwelveBirds Technologies Inc, a California (USA) corporation (“TwelveBirds”), which is responsible for the personal information it receives through the site. For any question or request about your information, email hello@twelvebirds.com.

When you send a request we collect your name, email, company, country or region, phone number, the domains and services you choose, and your message. To limit abuse we keep one-way hashes of your IP address and email address for rate limiting; the IP address itself is never stored. When you accept our registration terms, we also keep a salted one-way hash of your IP address with the version you accepted, as a record of your acceptance.

We store your customer account email and session records, including browser information, to verify your identity and give you access to orders placed with that email. Login codes are stored as hashes and expire after 10 minutes. A necessary HttpOnly cookie keeps this browser signed in for up to 7 days or until you sign out. Signing out does not delete your account or order history.

Only to reply to your request and, if you go ahead, to register and manage your domains.

Our hosting provider (Vercel), database provider and email delivery provider process data on our behalf. When a domain is registered, the registrant details go to the registrar (Openprovider) and the registry for that ending, as registration rules require.

When you order domains we collect the registrant details you give us: name, company, email, phone, postal address and, for some endings, registration numbers. We pass them to the registrar (Openprovider) and to the registry for each ending, as registration rules require. Some registries publish part of these details in public lookups (RDAP or WHOIS); we do not switch on WHOIS privacy protection when we register a domain. For generic endings such as .com, ICANN also requires the registry and the registrar to deposit a copy of the registration data with an escrow agent, so that the domains can be kept if either of them fails.

Card payments are handled by our payment provider. We never see or store your full card number; we keep only the card brand, the last four digits and the expiry date, so that we can tell you which card renewals will be charged to.

Your information may be processed in countries other than the one where you live, such as the United States, where data-protection rules may differ from yours. We take reasonable steps to protect it wherever it is processed.

We keep requests and our correspondence about them for up to 24 months after our last contact with you, then delete them. Records of orders and registered domains are kept while we manage the domains, and afterwards for as long as registration rules and our record-keeping duties require.

This site shows no advertising and does not track you across other websites; because no such tracking exists, it does not respond to browser “Do Not Track” signals, and no third parties collect information about your activity across other websites through this site.

You can ask to access, correct or delete your information, object to or restrict how we use it, and withdraw your consent where we rely on it, by emailing hello@twelvebirds.com. We will reply within 30 days, or sooner where local law requires it; in Brazil, for example, within 15 days. You can also complain to the data-protection authority where you live or work.