Privacy
Last updated 3 October 2026
Draft. This page hasn't been reviewed by a lawyer yet and may change before the acquisition service opens. Questions: hello@wantdot.com.
1. Who is responsible
Privilege Mendes, in Amsterdam, the Netherlands, who runs WantDot, is responsible for your personal data (the “controller” under the GDPR). Contact: hello@wantdot.com. We send our postal address on request.
2. What we store
Your email address and the domain, when you join the waitlist (with the budget band you picked), watch a domain (with your private maximum, if you set one), claim a domain, or make an offer (with the amounts and the message in it).
Which domains people look up, without anything that identifies who looked. It shows us which names are wanted.
A one-way hash of your IP address, for rate limits that stop abuse. We don't store the address itself.
3. Why, and on what legal basis
To do what you asked: confirming your email, sending the watch or offer emails you signed up for, verifying a claim, running a deal, and telling waitlist members when we open. The basis is performing our agreement with you, or taking steps you asked for before one.
To stop abuse and to see which names are wanted: the IP hash and the anonymous lookup log. The basis is our legitimate interest in keeping WantDot working and safe.
No advertising and no tracking cookies; the only cookie keeps a domain owner signed in. We don't sell personal data or share it for advertising.
4. If you own a domain someone wants
Domain pages show public registration records (RDAP/WHOIS) and DNS. To reach an owner for a buyer, we use the contact those records give, or a form the registrar provides. We use it only to pass on a buyer's interest: at most one message and one follow-up, and we stop if you say no. The basis is our legitimate interest, and the buyer's, in asking whether a domain is for sale.
We never publish a private owner's personal details. To be left alone, reply “no” to any message or write to hello@wantdot.com.
5. Who else sees it
The other side of a deal never sees your email address. Owners see your offer, not who you are; buyers see the owner's answer, not theirs. We remove links and contact details from messages between the two sides.
Services that run WantDot for us, under data processing terms: Cloudflare (hosting, database, and the Turnstile human check on our forms) and Resend (sending email). Both are US companies, so your data may be processed outside the EU. Those transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Escrow.com, when you choose to set up an account or a deal opens: it receives the email address and deal details it needs, and handles them under its own privacy policy.
6. How long we keep it
IP hashes: about an hour. Waitlist entries: until you leave, or until your first deal, because the date you joined sets the prices that hold for it. Watches: until you stop them. Claims, offers and deal records: while they're active, then up to 2 years, so we can answer questions about a deal. Anything sooner if you ask us to delete it, unless we must keep it for a deal that has closed.
7. Your rights
You can ask to see your data, correct it, delete it, get a copy to take elsewhere, restrict how we use it, or object to a use based on legitimate interest. Write to hello@wantdot.com; we answer within a month. Every watch email also has a link to stop.
If you think we handle your data wrongly, you can complain to the Dutch data protection authority (Autoriteit Persoonsgegevens) or the authority where you live.
WantDot isn't meant for children under 16, and we don't knowingly collect their data.
8. Do Not Track
Browsers' Do Not Track signals don't change anything here, because we don't track you across other sites.
9. Changes to this notice
When we change this notice, we update the date at the top. For a material change, we also email people with an active watch, claim, offer or service.