Privacy Policy.

Last updated: October 14, 2026.

This policy explains what personal data OFS Domains collects, why, who we share it with, and the choices you have.

Who we are

OFS Domains (www.ofsdomains.com) is operated by Ocean Floor Strategies (“OFS”, “we”, “us”). We are the controller of the personal data described here.

Data we collect

Account. Your email address and a hashed password, managed by Netlify Identity. If you use Google sign-in, Google shares your email and basic profile with us.
Purchases. Plan, domain name, amount, status, purchase and renewal dates, and registration status.
Payments. Processed by Stripe. Your card details go straight to Stripe and never touch our servers; we receive only a payment confirmation and limited details such as the amount and status.
Domain registrant data. The name, address, email, and phone that ICANN requires for each registration, shared with our registrar, Porkbun.
Build Desk chats and uploads. Your prompts, the conversation, and any files you attach.
Workspace and project data. Briefs, business names, logos, descriptions, generated sites, and hosted pages you create or upload.
Rate-limit identifiers. A one-way hash of your email or IP address, used only to limit abuse.
Browser storage. Preferences, local receipts, and drafts kept in your browser’s localStorage and sessionStorage.
Support messages. What you send us through the Support button or email.

How we use it

To create and secure your account and sign you in.
To take payment, register and renew your domain names, and host and publish your sites.
To answer your Build Desk requests and support questions.
To send renewal reminders and important account notices.
To prevent fraud, abuse, and overuse, and to keep the service running.
To meet legal, tax, accounting, and ICANN obligations.

We do not sell your personal data and do not use it for third-party advertising.

Legal bases

Where the GDPR or similar laws apply, we rely on: contract (providing the service you signed up for), legal obligation (tax records, ICANN registrant requirements), legitimate interests (security, abuse prevention, improving the service), and consent where we ask for it, which you can withdraw at any time.

Build Desk and AI providers

Build Desk prompts and attached files are sent through the Netlify AI Gateway to AI providers — Anthropic, OpenAI, and Google — to generate a reply. Don’t include passwords, payment details, or other secrets. Uploaded files are kept for 14 days and then deleted. Providers process this data under their own terms for API customers.

Sharing and subprocessors

Netlify — hosting, serverless functions, database, file storage, Identity, and AI Gateway.
Stripe — payment processing.
Porkbun — domain registration and WHOIS privacy.
Anthropic, OpenAI, and Google — AI responses for the Build Desk; Google also for optional Google sign-in.

We may also disclose data when the law requires it, to protect rights and safety, or as part of a merger or sale of the business, under a duty of confidentiality.

Retention

Account data: while your account is open, then deleted within a reasonable period after you close it.
Purchase and payment records: as long as tax and accounting laws require.
Registrant data: for the life of the registration and as ICANN and the registrar require.
Build Desk uploads: 14 days. Rate-limit records: a short rolling window.
Browser storage: until you clear it.

Domain Privacy Protection

Every name claimed on OFS Domains ships with WHOIS privacy on, at $0, where the registry supports it. Public WHOIS does not show your street, personal phone, or personal inbox; the registrar’s privacy service is the public contact.

Registries, the registrar, and ICANN still receive the real registrant data where the rules or the law require it. That file is not the public page.

Privacy does not hide the domain name itself. It hides the person behind it. Some registries do not allow privacy; we tell you at checkout if that applies.

Default is protected. Ask Support if you want a name’s WHOIS made public.

Your rights

Depending on where you live, you can ask to access, correct, delete, or export your personal data, and to object to or restrict some processing. EU, UK, and EEA residents have these rights under the GDPR and may complain to their data protection authority. California residents have rights under the CCPA/CPRA to know, delete, correct, and opt out of sale or sharing — we do not sell or share personal data for cross-context advertising — and we will not discriminate against you for using them. Contact us to make a request; we may need to verify your identity. Some data, such as registrant records and tax records, must be kept even after a deletion request.

Cookies and local storage

We do not use advertising or cross-site tracking cookies. Netlify Identity stores a sign-in token so you stay signed in, and the site uses localStorage and sessionStorage for preferences, drafts, and local receipts. A service worker caches pages so the site works offline. You can clear all of this in your browser settings.

Security

Data travels over HTTPS. Passwords are hashed by Netlify Identity, card data stays with Stripe, and rate-limit identifiers are hashed. No system is perfectly secure; tell us right away if you suspect a problem.

International transfers

Our providers may process data in the United States and other countries. Where required, transfers rely on safeguards such as Standard Contractual Clauses.

Children

OFS Domains is not for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

Changes

We may update this policy. We will change the date above and, for material changes, notify signed-in users.

Contact

Use the Support button on any page, or email oceanfloorstrategies2200@gmail.com.

Terms · Rights · Products · Name only · Home