Privacy Policy

This Privacy Policy explains how Oaklake Studio (“we”, “us”), the controller of your personal data, handles information when you use Namestorm at namestorm.app. We process personal data in line with Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados, Law No. 13.709/2018, the “LGPD”). If you have any question, email hi@oaklake.studio.

Account information

When you sign in, our authentication provider, Clerk, collects and stores the details needed for your account, such as your email address, your name if you provide it, and login identifiers. Clerk processes this on our behalf.

Content you provide

When you use Namestorm, we receive the name ideas and extensions you enter. If you are signed in and choose to save them, we store your shortlisted domains and your recent searches so they are there when you return.

Information collected automatically

Like most web services, our hosting provider records basic technical logs, such as IP address, timestamp, and browser type, to run and secure the Service.

Analytics

We use Google Analytics (GA4), a service provided by Google, to understand how people use Namestorm so we can improve it. It sets cookies and collects usage data such as the pages you view, a random device identifier, and general device and approximate-location information. The events we send are aggregate, for example how many domains you check, which extensions you click, and when you save a shortlist or export results. They do not include the specific name ideas you type. Google Analytics 4 does not log or store full IP addresses. You can opt out with Google’s opt-out browser add-on or by blocking analytics cookies in your browser.

Cookies

We use two kinds of cookies: the session cookies our authentication provider sets to keep you signed in, and the analytics cookies Google Analytics sets, described above. We do not use advertising cookies.

We use your information to:

• provide the Service, including running your domain checks and showing results;
• save and display your shortlists and recent searches when you are signed in;
• operate, secure, maintain, and improve the Service;
• respond to you when you contact us;
• comply with legal obligations.

Under the LGPD, we rely on the legal bases most appropriate to each purpose, including performing our agreement with you (Art. 7, V), your consent where you provide it (Art. 7, I), and our legitimate interests in running and securing the Service (Art. 7, IX).

To check availability, we send the domain name you are testing to registry RDAP services, found through IANA’s public directory, and where needed to Google Public DNS. These requests contain the domain being checked, not your identity or account. We cache availability results for a short time so repeated checks are faster; that cache holds domain names and their status, not personal data.

We do not sell your personal data, and we do not share it for advertising. We share data only with the service providers (operators) that make Namestorm work, and only as needed to run it:

• Clerk, for authentication and account management;
• Railway, for application hosting and our database;
• Google Analytics, for understanding how the Service is used;
• Google Public DNS and registry RDAP operators, for domain availability lookups.

The Service also links out to registrars such as Namecheap. When you follow an outbound link, you leave Namestorm and are subject to that site’s own privacy practices. We may disclose information if required by law or to protect our rights, our users, or the Service.

Some of our providers process data on infrastructure that may be located outside Brazil. Where personal data is transferred internationally, we rely on providers that offer an adequate level of protection and appropriate safeguards, consistent with the LGPD (Art. 33).

We keep your account information for as long as your account exists. We keep your saved shortlists and recent searches until you delete them or ask us to close your account. Technical logs are kept for a limited period for security and operational purposes, and the shared availability cache expires on a short schedule.

Under the LGPD, you have the right to:

• confirm that we process your data, and access it;
• correct incomplete, inaccurate, or outdated data;
• request anonymization, blocking, or deletion of unnecessary or excess data;
• request the portability of your data;
• ask about the entities we share your data with;
• withdraw consent, and delete data processed based on consent.

To exercise any of these, email hi@oaklake.studio. You also have the right to petition Brazil’s data protection authority (ANPD).

We use reasonable technical and organizational measures to protect your data, and we work with established providers that maintain their own safeguards. No method of transmission or storage is ever completely secure, so we cannot guarantee absolute security.

Namestorm is not directed to children. You must be at least 13 years old to use the Service, and if you are a minor under the LGPD, you should only use it with the consent of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will change the “last updated” date above, and we will highlight significant changes where appropriate. Please check back periodically.

For any privacy question, or to exercise your rights, contact the controller: Oaklake Studio, at hi@oaklake.studio, in Florianópolis, Santa Catarina, Brazil.