Privacy policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Luca-Chris Sträter
Hildebrandweg 48
48429 Rheine
Germany
Email: contact@slxca.com

2. Overview

This website is a free, open-source project for checking domain availability. We do not use analytics or tracking tools, advertising networks, or cookies. There are no user accounts, payments, or newsletters.

Personal data is processed only to the extent necessary to operate the website, maintain security, and respond to inquiries.

3. Hosting via Vercel

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

Vercel processes technical access data generated when the website is accessed. This may include the IP address, date and time, requested URL, referrer, user agent, and status code. Processing serves the provision, security, and stability of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

Vercel provides a Data Processing Addendum (DPA): https://vercel.com/legal/dpa. Further information: https://vercel.com/legal/privacy-policy.

The API functions are configured for the Frankfurt region (fra1). Static delivery uses Vercel's global CDN. Processing in the United States is possible. The transfer is based on appropriate safeguards (e.g., EU Standard Contractual Clauses or the EU-US Data Privacy Framework, where applicable).

We do not maintain our own persistent server logs. Vercel's technical retention periods apply.

4. Domain checks

When you enter a domain name, it is transmitted to our server and used for the availability check.

The check uses DNS queries and, where necessary, WHOIS and RDAP queries to the respective registries and registrars. The entered domain name is transmitted to these services. These services see our server's IP address, not yours.

Queries may be made worldwide. There is no guarantee that all target servers are located in the EU.

Results are cached in memory for a short time (approximately 5 minutes) and are not stored permanently.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the domain check) or Art. 6(1)(b) GDPR where the query prepares a contract with a registrar.

Please do not enter personal data into the search field that you do not want to use for the domain check.

5. Local storage (theme)

We store your theme preference (light/dark/system) in your browser's localStorage under the key theme. This information remains on your device and is not transmitted to us.

You can delete it at any time through your browser settings.

Legal basis: § 25(2) TDDDG and Art. 6(1)(f) GDPR (providing the presentation you requested).

No cookies are set.

6. Contact by email

If you contact us by email, we process your email address and the content of the message to respond to your inquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. The data is deleted once the inquiry has been resolved and no statutory retention obligations apply.

7. External links

The website contains links to GitHub (GitHub Inc., USA) and to registrars such as Namecheap and GoDaddy. When you click these links, the privacy policies of the respective providers apply. We have no influence over their data processing.

These links open in a new tab and use rel="noopener noreferrer".

8. No analytics, cookies, or tracking

We do not use analytics tools, advertising or tracking services, or social media plugins. No cookies are set. No profiling takes place.

9. Recipients and third-country transfers

Recipients of the data are the hosting provider Vercel and, for domain queries, the DNS, WHOIS, and RDAP services that are queried.

Third-country transfers may occur in particular through Vercel (USA) and globally distributed registry/WHOIS/RDAP servers. Vercel provides appropriate safeguards. No other recipients are involved.

10. Retention

• In-memory cache: approximately 5 minutes.
• Server logs: according to Vercel's retention periods; we do not maintain our own persistent logs.
• Email inquiries: until the inquiry is resolved, then deleted unless statutory retention obligations apply.
• Local storage: until you delete it.

11. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR).

You can contact us at any time at contact@slxca.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, email: poststelle@ldi.nrw.de, website: https://www.ldi.nrw.de.

12. Security

The website is delivered over HTTPS. We use technical and organizational measures to protect data, including security headers, rate limiting, input validation, and regular updates.

Despite these measures, absolute security during transmission over the internet cannot be guaranteed.

13. Changes

We may update this privacy policy if data processing or legal requirements change. The version published on this page applies.