LentsName collects the minimum information needed to operate free domains, secure accounts and investigate abuse.
Data we collect
- Account details: display name, email address, password hash and optional two-factor secret.
- Service data: domains, DNS records, redirect targets, application descriptions, API-key metadata and support messages.
- Security data: session details, IP address, user-agent, login attempts, audit logs and abuse reports.
- Email delivery records: recipient, template type and delivery status. Message bodies are generated from service events.
How we use data
We use information to provide and secure the service, enforce quotas and policies, investigate abuse, communicate account events and comply with legal obligations. We do not use advertising trackers, sell personal data or build behavioral advertising profiles.
Processors
Cloudflare provides domain registration, bot verification and network services. Alibaba Cloud DirectMail delivers transactional email. Google Safe Browsing may receive a submitted redirect URL for malicious-link screening. Infrastructure providers process data on our behalf under their applicable terms.
Retention
Active account and DNS data is retained while the service is in use. Database backups are retained for seven days. Security and audit records may be kept longer where needed for fraud prevention, dispute resolution or legal compliance. Deleted accounts are disabled and their domain prefixes enter a 30-day cooldown.
Your choices
Signed-in users can download a structured JSON export and delete their account from the Account & privacy section. You may also contact privacy@letsname.net to request access, correction, deletion or restriction where applicable.
Cookies
LentsName uses an essential, HttpOnly session cookie for authentication. Optional Cloudflare Turnstile may set challenge-related storage required to protect forms from automated abuse. We do not use analytics or advertising cookies.
Security and international use
We use password hashing, HTTPS, access controls, two-factor authentication for administrators, audit logs and least-privilege API keys. Data may be processed in countries where our providers operate. Take care before submitting sensitive personal information in a support or abuse report.