Privacy Policy
We make software to protect you and yours.
The short version
- Your data stays yours — we use only what's needed to run Romp.
- Stripe handles payment; we never see your card number.
- Delete your account anytime from /account — your data goes with you.
- Your scans are private — what you scan stays between you and Romp.
- No trackers, no analytics, no ad networks. We don't need them.
What we collect
When you create an account, we store:
- Email address — used for sign-in, password reset, and product emails (license delivery, billing).
- Password — stored as a scrypt hash (N=32768). The original password is never stored in any form.
- Account metadata — created-at and last-login timestamps, current tier.
- Stripe customer ID — if you have an active subscription or have purchased the Download tier. This lets us look up your billing relationship.
When you run a scan, we log:
- The target hostname you scanned (for rate limiting + abuse prevention).
- Your IP address at scan time (for rate limiting + abuse prevention).
- Timestamp of the scan.
We do not log the contents of scan results long-term. Scan output is returned to you and discarded server-side.
What we don't do
- We don't sell your data, ever.
- We don't share your data with third parties for marketing.
- We don't use third-party trackers, analytics, or advertising networks. No Google Analytics, no Facebook Pixel, no Hotjar.
- We don't read your scan history for any commercial purpose.
- We don't share what you scan with the target site or any other party.
Third parties we use
Romp uses only the third parties strictly necessary to operate:
- Stripe — payment processing. Stripe sees your card details (we never do) and a record of what you purchased. Stripe's privacy policy.
- Let's Encrypt — TLS certificates for romp.domainless.fun. They see public certificate issuance metadata, nothing about your account.
Cookies
We set two cookies, both HttpOnly + Secure + SameSite=Strict:
romp_at— your JWT access token, 24-hour lifetime.romp_rt— your refresh token, 30-day lifetime, single-use.
Both are essential for sign-in. We don't use any analytics, tracking, or advertising cookies.
Data retention
- Account data: kept until you delete your account.
- Payment records: kept for 7 years (required by tax + financial regulations).
- Refresh tokens: deleted on logout or after 30 days.
- Rate-limit IP records: rolling 1-hour window, then discarded.
Your rights
You can:
- Access your data — email privacy@domainless.fun and we'll send everything we have on you.
- Delete your data — same email. We comply within 30 days (subject to legal retention for payment records).
- Correct your data — use the account page or email us.
- Export your data — we can send a JSON dump of your account on request.
If you're in the EU/UK, these are your GDPR rights. If you're in California, these are your CCPA rights. Wherever you are, we'll do what's right.
Children's privacy
Romp is not designed for or directed at children under 16. We don't knowingly collect data from anyone under 16.
Changes to this policy
If we make material changes, we'll notify registered users by email at least 30 days before the changes take effect. Previous versions are kept in our git history.
Contact
Questions, complaints, or requests: privacy@domainless.fun