Privacy Policy
Last updated: May 27, 2026
This Privacy Policy describes how expired-domains.com ("we", "us", or "our") collects, uses, and shares information when you visit our website, browse domain lists, create an account, or use related features.
Who we are
Expired Domains provides daily lists of expiring, dropped, and pre-release domain names with search, filters, and export tools. For privacy inquiries, contact us at [email protected].
Information we collect
Information you provide
- Account information: When you sign in with Google, we receive your Google account identifier, email address, and basic profile information provided by Google.
- Communications: If you contact us, we collect the content of your message and contact details.
Information collected automatically
- Usage and device data: With your consent where required, we collect page views, referring URLs, browser type, and general usage patterns through Google Analytics.
- Security data: We use Google reCAPTCHA to protect against automated abuse. Google may process device and interaction signals for fraud detection.
- Server logs: Our infrastructure may log IP addresses, request paths, timestamps, and user agents for security, rate limiting, and troubleshooting.
- Session data: We issue HttpOnly session cookies to keep you signed in and to maintain security checks during browsing.
How we use information
- Provide, operate, and improve the domain browsing experience
- Authenticate users and maintain account sessions
- Prevent abuse, enforce rate limits, and verify security challenges
- Understand aggregate site usage when analytics consent is granted
- Respond to support requests and legal obligations
Legal bases (EEA, UK, and Switzerland)
Where applicable privacy law requires a legal basis, we rely on:
- Consent: for optional analytics cookies and similar measurement technologies
- Contract: to provide features you request, such as signed-in access
- Legitimate interests: for security, fraud prevention, and service reliability, balanced against your rights
- Legal obligation: where we must retain or disclose information under law
Third-party services
We use trusted providers that may process data on our behalf:
- Google Analytics: website usage measurement (only with consent where required)
- Google Sign-In: authentication
- Google reCAPTCHA: bot and abuse protection
- Hosting and infrastructure providers: application delivery and storage
See our Cookie Policy for details on cookies and similar technologies.
Data retention
- Account and sign-in records are retained while your account remains active and as needed for legitimate business or legal purposes.
- Session cookies expire according to their configured lifetime or when you sign out.
- Analytics data retention follows Google Analytics settings configured for our property.
- Server logs are retained for a limited period for security and operations.
Your choices and rights
Depending on your location, you may have the right to:
- Access, correct, or delete personal data we hold about you
- Object to or restrict certain processing
- Withdraw consent for optional analytics at any time via Cookie Settings
- Lodge a complaint with your local data protection authority
To exercise these rights, email [email protected]. We may need to verify your identity before responding.
International transfers
We and our service providers may process data in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.
Children
Our services are not directed to children under 16, and we do not knowingly collect personal data from children.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.
