Privacy policy

BuySiDomain (“we”, “us”) runs buysidomain.com, an independent marketplace for .si domains that is not affiliated with Register.si.

Data controller (responsible for the personal data described here): Hemant Mahato, India.

Contact: 50hemantmahato@gmail.com

• Email address: when you sign up for alerts on new .si domains.
• Buy/Sell choice: whether you want to buy or sell a .si domain. Signups through the domain alerts form are recorded as “Buy”.
• Analytics data, only if you click “Accept”: pages viewed, how you reached the site (referrer), approximate location (country or city), device type, browser and operating system, and a randomly generated identifier stored in a cookie.
• Technical data: when you load any page, our hosting provider processes your IP address and request details so it can deliver the site and keep it secure.

We don’t ask for your name, address, phone number or payment details.

• Emails: we use your email address to tell you about new .si domains listed on BuySiDomain. Your Buy/Sell choice helps us decide what to send you. Every email has an unsubscribe link. Legal basis: your consent (GDPR Art. 6(1)(a)).
• Analytics: we use analytics data to understand how many people visit and which pages they use, so we can improve the site. Legal basis: your consent (Art. 6(1)(a)), given through the cookie banner.
• Hosting and security: we use technical data to deliver the website and protect it from abuse. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f)).

• MailerLite stores the email addresses and Buy/Sell choices from our signup form, and sends our emails. MailerLite’s form script loads on pages that show the signup form.
• Firebase Hosting (Google) hosts and delivers this website.
• Google Analytics 4 (Google) measures website traffic, but only after you accept analytics cookies. Google Analytics 4 does not log or store IP addresses.
• Register.si (Arnes, the official .si registry) answers our .si domain checker. Your browser sends the name you check directly to the registry’s public RDAP service, which sees your IP address like any website you visit. We don’t receive or store your searches, and the name you check is removed from the page address before Google Analytics sees it, so it isn’t recorded there either. To avoid repeat lookups and limit how often the checker can run, your browser keeps recent results in session storage for 10 minutes and the times of your last minute of lookups in local storage.

These providers process data on our behalf under data processing agreements and only for the purposes described here.

We only use analytics cookies, and only after you click “Accept” in the cookie banner. Until then, Google Analytics isn’t loaded at all: no data is sent to Google and no cookies are set. We use Google Consent Mode, with every consent type denied by default.

We also save your cookie choice (“accepted” or “rejected”) in your browser’s local storage, so we don’t ask again on every visit. It contains no personal data.

Some blog posts embed content from X (formerly Twitter). When you view one, X can set its own cookies, under X’s privacy policy.

You can change your choice at any time. If you reject analytics, the Google Analytics cookies are deleted.

Cookie settings

• Analytics data: kept for 2 months, then deleted automatically. The analytics cookies also expire after 2 months.
• Email address and Buy/Sell choice: kept until you unsubscribe or ask us to delete them.
• Hosting logs: kept by our hosting provider for a limited time, for security and operations.

Google Analytics and Firebase Hosting are provided by Google, so data may be transferred to and processed by Google LLC in the United States. These transfers are covered by the EU–US Data Privacy Framework, under which Google is certified, and by the European Commission’s Standard Contractual Clauses.

We never sell, rent or trade your personal data. We only share it with the service providers listed above, and only so they can provide their services to us.

Our pages link to websites we don’t control, and each has its own privacy policy:

• PremiumDoms.io: the “Buy on PremiumDoms.io” buttons on domains listed by PremiumDoms.io open their sale page. Anything you enter there, including payment details, goes to PremiumDoms.io, not to us.
• Dynadot: the “Register” buttons in our .si checker open Dynadot. Some of these may be affiliate links, which only tell Dynadot that you came from BuySiDomain. We don’t receive any personal data from Dynadot.
• Escrow and marketplace services (coming soon): domain owners can’t list their own domains on BuySiDomain yet. Once they can, those sales will be processed through a third-party escrow or marketplace service (such as Escrow.com, Dan.com, or Spaceship), under that service’s own terms and privacy policy.

We don’t pass your data to these sites, and our buy buttons don’t tell them which page you came from. Please read their privacy policies before you share anything with them.

Under the GDPR you have the right to:

• Access: get a copy of the personal data we hold about you.
• Correction: have inaccurate data corrected.
• Deletion: have your data erased.
• Unsubscribe: use the unsubscribe link in any email we send, or email us.
• Withdraw consent: at any time, for emails (by unsubscribing) or analytics (via Cookie settings). Withdrawing doesn’t affect processing that happened before.
• Restriction, objection and portability: limit or object to how we process your data, or receive it in a portable format.
• Complaint: lodge a complaint with your local data protection authority. In Slovenia, that is the Information Commissioner (Informacijski pooblaščenec).

To use any of these rights, email us. We’ll reply within one month.

Questions about this policy or your data: 50hemantmahato@gmail.com

If we change this policy, we’ll update the date at the top of this page.