Draft for legal review. This is not the final version and does not take effect until we publish an approved one. It is not legal advice.
Draft 0.1 · October 18, 2026
tldomain.io, a division of myGIGlife INC., 813 Oak St, Ste 10 - 1190, Conway, AR 72032, operates the service ("we," "us"). This notice will be updated before live services launch, and the final version will confirm each retention period. Items marked planned are not built yet.
The short version
- We collect information needed for accounts, service delivery, and security.
- We don't sell personal information or share it for advertising.
- Our policy is to avoid advertising trackers and third-party analytics.
- The account system uses two cookies: one keeps you signed in, and one holds your email address for up to 30 minutes while you confirm it. We don't set advertising or analytics cookies.
Information we use
| Information | Why we use it | Planned retention |
|---|---|---|
| Email address and a password stored as an Argon2id hash | Account creation and sign-in | While your account is active, subject to required retention |
| Phone number (verification is simulated in the closed beta) | Verification and abuse prevention. One number can be verified on one account. The number is stored as entered for texting you and as a one-way hash for the uniqueness check. Our text-message provider receives it to send the code. | While your account is active, subject to required retention |
| Identity verification status, country, date, and a one-way hash of the document number (planned, optional) | Higher trust levels and prevention of duplicate free bundles | To be confirmed. We do not plan to keep ID images; the verification provider may retain them under its policies. |
| Session records, browser information, and a hashed network address | Keeping you signed in and protecting your account | Until the session expires, about 30 days |
| Trust history and account activity logs | Explaining trust decisions, detecting abuse, and keeping an audit trail | 24 months, except abuse decisions and account-deletion records, which we keep longer |
| Domain registrant contact details | Registering and managing domains with registrars and registries | For as long as the registration and applicable rules require |
| DNS records, server settings, mailbox names, and aliases | Providing the services | While the service is active, subject to retention requirements |
| Email you send and receive | Delivering your email | Until you delete it, subject to the service's backup and retention policy |
| Server access logs | Security, troubleshooting, and abuse prevention | To be confirmed |
| Abuse reports and any contact details the reporter supplies | Investigating abuse and keeping a record of decisions. The reporter's email is not shown to the account holder. We also keep a one-way hash of the reporter's network address to spot repeat or duplicate reports. | To be confirmed |
| Wallet address and blockchain transaction reference (planned) | Matching payments to orders and keeping accounting records | As tax, accounting, and other legal obligations require |
How email is handled
Our staff do not routinely read customers' email. Automated spam, malware, and security filters may process message content to protect the service. If staff access is ever needed for support or an abuse investigation, the final policy will say when that is allowed.
Who receives information
- Our hosting and network providers, including Cloudflare, which handle web traffic and DNS for the service and see network addresses.
- The domain registrar and registry, when required to register or manage a domain.
- The identity verification provider, if you choose to verify your identity. The provider handles ID images under its own privacy and retention rules. We'll ask for your consent before any face scan.
- Hosting and email providers that help operate the service.
- Government agencies or other parties when the law requires disclosure.
We do not sell personal information or share it for cross-context behavioral advertising.
Your choices
- You can change or delete much of your account information in your dashboard. Closing an account starts a 30-day grace period. After that, your account is deleted automatically, 30 days after you close it, unless you still owe an unpaid balance, an abuse case about your account is still open, or we must keep certain records (such as invoices) by law. You can download a copy of your data at any time from Settings.
- You can ask for access, correction, or deletion by emailing hello@tldomain.io. Response deadlines are to be confirmed.
- We handle access, correction, and deletion requests from every user the same way, wherever you live. We aim to answer within 45 days, and we may need to confirm it's you first. If we refuse a request, we'll tell you why and how to reach us again. [OWNER DECISION: 45-day answer time.]
- If the law where you live gives you more rights than this notice, those apply too.
Children's privacy
tldomain.io is not directed to anyone under 18, and you must be at least 18 to hold an account. We don't knowingly collect personal information from people under 18. If we learn that an account belongs to someone under 18, we close it and delete the information we hold about them, except records the law requires us to keep. If you think a minor has an account, email hello@tldomain.io. [OWNER DECISION: minimum age 18 is proposed. LAWYER REVIEW: Arkansas Act 952 of 2025, effective July 1, 2026, covers services directed to children and teens or with actual knowledge of their ages.]
Security
We use encrypted connections, hashed passwords, and account activity logs to help protect the service. No online system can guarantee perfect security. If a security incident exposes personal information, we'll notify the affected people and the authorities as Arkansas and other applicable law requires, including the Arkansas Attorney General where that law applies.
Updates to this notice
We'll explain material changes before they take effect when required, and we'll make previous versions available on request.
Contact
tldomain.io, a division of myGIGlife INC.
813 Oak St, Ste 10 - 1190, Conway, AR 72032
Email hello@tldomain.io.