we collect the bare minimum.

Owndle is operated by Ross Hawthorn t/a Random Shenans (United Kingdom). Contact: hello@owndle.com. We’re the data controller for the personal data described below.

• Email — to sign you in via magic link and send renewal alerts. No password is ever stored.
• Your domains — the names you import (or sync from a registrar) plus what RDAP / WHOIS returns publicly about each: registrar, expiry, nameservers, DNSSEC status. We don’t scrape your private registrar accounts.
• Mobile push token — if you grant notification permission in the iOS or Android app, so we can deliver renewal alerts.
• Click events — when you tap a renew / transfer / list button we log which action, which registrar / marketplace, and the timestamp. Used for affiliate attribution and your own portfolio stats. No tracking pixels, no third-party analytics SDKs.
• Stripe billing data — if you subscribe, Stripe holds your payment details (we never see your card). We store the Stripe customer + subscription IDs so the workspace knows it’s active.

• Supabase — auth + Postgres hosting in the EU. They process data on our behalf.
• Stripe — subscription billing.
• Resend — sends transactional emails (magic links, renewal alerts).
• Expo Push — relays mobile push notifications to APNs / FCM.
• Registrars + marketplaces — when you click a transfer or list-for-sale link, we redirect you to their site with our affiliate code appended. They see what you see in a normal browser visit. We do not pass your email or account data to them.
• WhoisXMLAPI — fallback registrar lookup for TLDs (mostly .co / .io / .ai) that aren’t in IANA’s public RDAP bootstrap. We send only the domain name.

We don’t sell your data and we don’t run third-party marketing trackers on this site or in the apps.

When you click a “transfer” or “list for sale” CTA we redirect you through our affiliate link with partner registrars and marketplaces. If you purchase, we may earn a commission at no extra cost to you. We surface the cheapest registrar based on our price catalog, not the one paying the highest commission.

Web: one Supabase session cookie so you stay signed in. No advertising cookies, no third-party tracking pixels.

Mobile: the Supabase session is stored in encrypted device storage (AsyncStorage + expo-secure-store).

You can ask us to:

• · Export your data (CSV is at /api/portfolio/export when signed in).
• · Delete your account and everything we hold.
• · Correct anything that’s wrong (registrar override gives you per-domain correction without contacting us).
• · Lodge a complaint with the ICO (ico.org.uk).

For account deletion email hello@owndle.com from the address on the account.

We keep your domain portfolio + click history while your account is active. On deletion, your row is removed within 30 days; Stripe and email-delivery providers may retain billing/email logs per their own retention policies and legal obligations.

We’ll update this page when behaviour changes. Material changes get an email to active accounts at least 14 days before they take effect.