C22K ("we", "our", or "us") operates a domain marketplace where sellers list domains for sale and buyers can purchase them. This policy explains what data we collect, why, and how we protect it.
Information We Collect
Visitors to listed domains
IP address — used for deduplication (one visit per IP per 24 hours) and then stored anonymised as a visit record
Approximate location (country, city, latitude/longitude) — derived from Cloudflare's edge network at the time of the request
User-agent string — used to filter bot traffic; not stored long-term
Timestamp of visit
Sellers who create an account
Google account email address and display name — collected via Google OAuth at sign-in
Domains you submit for listing, including asking price and DNS verification status
Buyers who purchase a domain
Payment is processed entirely by Escrow.com. We do not store card numbers or billing details. Escrow.com's privacy policy applies to payment data.
How We Use Your Data
Visitor data is displayed on each domain's listing page as an aggregate visit count and location map — to help buyers gauge real traffic interest
Seller account data is used to identify your listings in your dashboard
We do not sell, rent, or share personal data with third parties for marketing purposes
Cookies and Sessions
If you sign in as a seller, we store a single HTTP-only session cookie containing a signed JWT. It expires after 30 days. We do not use tracking cookies or third-party analytics.
Data Retention
Visit records are retained indefinitely to power the traffic statistics shown on listings. If you would like your account or visit data deleted, contact us at the address below and we will remove it within 30 days.
Third-Party Services
Cloudflare — all traffic passes through Cloudflare's network. Cloudflare may log request metadata per their own privacy policy.
Google — used for seller sign-in via OAuth. Google's privacy policy applies to the authentication flow.
Escrow.com — used for payment processing and escrow. Escrow.com's privacy policy applies to checkout and payment data.
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing hello@c22k.com.
Changes
We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes.