Privacy policy
Short version: the public site has no accounts, no passwords and no advertising trackers. We keep a first-party count of page views so we know which names people look up, and we never sell or share it.
Last updated: October 15, 2026 · Controller: Worthly (.si domain intelligence) · Contact: hello@worthly.si
What we collect
Page views (first-party)
- The page you requested and the time, in UTC.
- A salted one-way hash of your IP address — never the address itself. The hash cannot be reversed and changes if we rotate the salt.
- A bot/human flag and the browser's user-agent string, to keep bots out of the numbers.
What we do not collect
- No names or addresses — the site needs no account and no login. The only exception is the address you type into the subscribe form, and only after you confirm it.
- No advertising or cross-site trackers, no social pixels, no fingerprinting.
- No cookies on the public site. The only cookie on this domain belongs to our own admin session.
API keys
A paid API key is an email address plus a secret string. We store only a hash of the secret, so the key itself cannot be recovered from our database — if you lose it, we issue a new one. The email is kept only to send you the key and to warn you about changes to the API.
If you subscribe to the sales digest
We store the address you type, the date you confirmed it, and which page referred you — nothing else. It is double opt-in: no message is sent to an address until the confirmation link inside it is clicked, and every message carries a one-click unsubscribe that takes effect immediately. Unsubscribing marks the row as unsubscribed and stops all sending; we keep the row so that you are not mailed again by accident. Ask us at hello@worthly.si and we will delete it completely. Our own mail server sends the digest, not a marketing platform, and there are no tracking pixels or open-rate beacons in it.
If you list a domain for sale
Submitting a name through List your domain stores the name, your asking price, a link to your own listing, the one-line note you write, your email address and a hash of the submitting IP — and nothing else. Your email is never published: buyers reach you through a message to hello@worthly.si that we forward on. The secret manage link in your confirmation email is the only credential, and withdrawing a listing deletes nothing immediately: it simply stops appearing in public. Ask us and the row is deleted outright.
Third parties that do see your traffic
- Cloudflare — our CDN and DNS, which proxies the site and keeps standard security logs under its own policy.
- Google Fonts — loading the typefaces your browser requests directly from Google.
- PayPal and the public blockchains — only if you choose to pay. Payments happen on their infrastructure under their policy; we never see your card or wallet credentials.
How long we keep it
Page-view rows are kept for up to 12 months and are aggregated after that; the raw rows are then deleted. Events (like a registrar-link click) are kept for the same period without any identifier beyond the hashed IP. Emails from the API process are kept while your key is active and for 12 months after.
Your rights
Wherever you are, you can ask us what we hold, ask for a copy, ask for correction, or ask us to delete it. Write to hello@worthly.si with the page or the request concerned; if the data is keyed by a hashed IP we will explain what we can and cannot link back to you. We do not sell personal data to anyone, at any price.
Why we log at all
Because a tool that reports on .si names should be able to report on itself. The counts tell us which names people are actually shopping for, which pages fail them, and whether an article was worth writing. That is the entire purpose — and the reason the numbers stay in our own database rather than in an advertising platform's.