Privacy

If you create an account, we store:

• your email address
• the name you entered
• a hashed version of your password — never the password itself, and it cannot be reversed
• session records so you stay signed in, including the IP address and browser user-agent of the sign-in
• the domain names you save as favourites

Without an account, we store nothing about you. The generator runs entirely in your browser, and the words you type are never sent to us until you press Check.

We do not sell or rent your data. We do not run analytics or behavioural tracking. We do not build a profile of you, and we do not email you marketing.

We do not keep the names you generate. They exist in your browser until you save one deliberately.

Checking a name means querying registry services. Those requests are made by our server, not your browser, so those services see our address and never yours — no cookie, IP address, or account detail of yours leaves with them.

Cloudflare operates the network in front of this site, so it processes your requests in transit and may set the cookies described on the cookies page. Their own privacy terms cover that.

Registrar links are ordinary outbound links. If you follow one, that registrar’s own privacy policy applies from that point.

The free plan is ad-supported. The network is Google AdSense, run by Google Ireland Limited for visitors in Europe, and its script loads on every page served to a free-plan visitor. What Google does with what it collects is governed by Google’s own privacy policy, not this one — we receive only aggregate earnings figures, never anything identifying you.

Google’s consent message asks visitors in the EEA, the UK and Switzerland before personalised advertising is served, and refusal is honoured. The cookie page sets out which cookies are involved. Pro subscribers are never sent the advertising script.

Account data stays until you delete your account. Sessions expire after 30 days, or immediately when you sign out.

Deleting your account removes your saved names at the same time — they are tied to your account and go with it.

You can see everything we hold about you on your account page: it is your email, your name, and your saved list. You can remove saved names individually, and you can delete the account entirely.

If you are in the EU or UK, you have rights to access, correct, export, and erase your data. The account page covers most of that directly; for anything it does not, get in touch.

Passwords are hashed. Traffic is encrypted in transit. Session cookies are HttpOnly, SameSite, and Secure, so scripts cannot read them and other sites cannot send them. The database is not reachable from the public internet. None of this makes a breach impossible, and we will tell you if one affects you.