Privacy policy
What we collect when you use follow.si, and why.
Last updated 6 November 2026
Browsing
You can browse every page without an account. We use a session cookie so forms work, and we do not run advertising or analytics trackers or sell personal data. Your shortlist (the hearts) is saved in your own browser until you sign in.
Your account and page
You sign in with a one-time link we email to you, so we store your email address and never a password. We also store what you add yourself: your handle, display name, bio, website, X handle, the domains you list and your shortlist. Your page at follow.si/yourname shows your handle, display name, bio, links and listed domains. It never shows your email address. When you sign in we set a small cookie with your handle so the header shows your account.
Domain verification
To verify a domain you can add a DNS record, upload a file, or receive an email at an address on that domain (such as admin@). We send that email only when you ask, and we store which method verified the domain.
Forms
When you use the Submit form or the correction form we store what you enter and a one-way hash of your IP address for abuse control. Every public form uses Cloudflare Turnstile to block automated spam; Cloudflare's privacy policy applies to that check. We use form data only to review your message, and keep it for up to 24 months.
Embedded posts
Some updates show a post from X. When one scrolls into view, your browser loads it from X, and X's privacy policy applies to that content. We ask X not to use it to personalise what you see.
Buying a name
Purchases complete on Spaceship under Spaceship's terms and privacy policy. We never see or store your payment details. If you email or message us on WhatsApp about a name, we keep that conversation to answer you.
When you make an offer on a name, we store the amount, your email, the name you give and your message, and email you a link to confirm it. Offers you never confirm are deleted after a week. A confirmed offer goes to the owner of the name so they can reply to you.
Account and verification emails are sent through Amazon SES. We do not add you to marketing lists.
Data about domain names
Domain pages describe domain names and websites, not people. We do not collect or publish registrant contact details.
Your rights
You can edit your page at any time, and ask for a copy of your data or for its deletion at [email protected]. We reply within 30 days.