Legal

Privacy policy.

This policy explains what Depais collects, why it is used and what choices are available to you.

Effective September 2026Depais

Information you provide

We process account details, reviews, reports, ownership evidence and messages you intentionally submit. Do not include sensitive personal information in public contributions.

Website analysis data

Depais collects publicly accessible technical responses and metadata from domains submitted for analysis. This may include DNS records, network information, certificates, page metadata, screenshots and detected technologies.

Cloudflare URL Scanner

When this optional integration is enabled, Depais sends the normalized public homepage URL to Cloudflare URL Scanner for dynamic and reputation analysis. We do not include URL credentials, query strings or fragments. Scans are Public by default and may appear in Cloudflare's recent-scan list and search results. If an eligible account is explicitly configured for Unlisted visibility, the scan is excluded from those listings but may remain accessible to anyone with its scan ID. In either mode, Cloudflare processes and retains the public URL, result and screenshots. Cloudflare documents 12-month retention for successful scans and deletion of failed scans older than 30 days. Do not submit a hostname if its existence itself is confidential.

Operational data

Security and access logs may record IP address, browser information, timestamps and requested pages. We use this data to operate, secure and troubleshoot the service.

How information is used

Information is used to provide reports, moderate contributions, verify ownership, prevent abuse, improve analysis quality and meet legal obligations.

Retention and disclosure

We retain information only as long as reasonably needed for these purposes. We may use service providers acting under appropriate safeguards or disclose information when legally required.

Your choices

You may update account information, edit or remove eligible contributions and request review of inaccurate personal data. Public website facts may remain when they are lawfully sourced and relevant.

Contact

Privacy questions can be sent to admin@depais.com.

Domain intelligence

Evidence, freshness and limitations

Depais separates direct observations, authoritative reports, third-party reports and derived context. Every published fact records its source, observation time, freshness window, confidence and known limitations. Missing or unavailable data is shown as unknown, never as a positive safety result.

Registration data may be requested from IANA-selected registry RDAP services. Network allocation data may come from IANA-selected Regional Internet Registry RDAP services. Registration-country and network-allocation-country values describe registry records; neither is a reliable physical-location claim. Personal RDAP contact fields are discarded.

DNSSEC observations distinguish resolver-reported authenticated data from simple DS or DNSKEY presence. Certificate transparency and public archive lookups are best-effort, incomplete sources. A first certificate or archive capture is not treated as a domain creation date. Optional GeoLite estimates remain disabled unless licensed local databases and build metadata are configured.

Automated findings explain corroborated technical context and have no numeric score effect in Domain Intelligence v1. Domain age, registrar, TLD, country, hosting provider, CDN, privacy redaction, tracker presence or an unavailable reputation provider is not by itself a verdict about safety, legality or trustworthiness.