Privacy
Last updated: September 2026
Who we are
Domfly is a website building and hosting service operated by Domfly LLC. This page describes what we hold about you and why.
What we store
- Your account — name, email address, and a password stored only as a salted hash. We never hold your password itself.
- Your projects — the name, address and content of any site you build or that we host for you, including images you upload.
- Your subscription — what plan you are on, what it costs, its status and renewal date. This is a copy of what Stripe holds.
⚠️ We never see or store your card details. Payment information is entered directly with Stripe and is never sent to us.
Visitors to sites we host
Every site published on Domfly counts its own visits, so the person who built it can see how it is doing. This is our own counter — nothing is sent to an advertising network or an outside analytics company.
For each page view we record the site and page address, the country, and the browser, operating system, device type and screen size. We also record where the visit came from, reduced to the referring website’s name — never the full address it linked from.
No cookie is set and nothing is stored on the visitor’s device. To count returning visits within a day we keep a one-way fingerprint made from the visitor’s IP address, their browser identification, the site, and the date. It cannot be reversed, it is different on every site, and it changes every day — so a visitor cannot be followed from one day to the next, or from one site to another. The IP address itself is never stored.
Web addresses are recorded without anything after the ? — so search terms, tokens and anything else carried in a link stay out of our records.
Messages sent through a contact form
A site published on Domfly can carry a contact form. When someone fills one in, we store what they typed and send it to the person who owns the site.
The questions are set by the site owner, not by us. We keep each answer alongside the question it was given for, the page the form was on, and the time it was sent — so an enquiry still reads correctly if the owner later renames or removes a question.
We do not store the sender’s IP address, their browser identification, or where they came from. To stop the same source flooding a site with messages we keep a one-way fingerprint of the sender for the day, made the same way as the visit counter above and separately from it — it cannot be reversed, it changes every day, and it cannot be matched against that counter.
A message is emailed to the site owner through Mailgun, so it passes through them on the way. It is not sent anywhere else, and we do not read, analyse or use these messages for any purpose of our own.
We keep messages until they are deleted. Deleting the site they were sent to, or the account that owns it, deletes them with it. If you sent a message through a site we host and want it removed, contact the site owner, or us at the address below and we will pass it on.
⚠️ If you build a site on Domfly, the messages people send you are your responsibility. If you ask for sensitive information, that is what we will hold on your behalf — so only ask for what you need.
Who else handles it
We use three outside services, each for one job (the visit counting described above is our own, and is not one of them):
- Stripe — payments and card storage.
- Mailgun — sending account email such as sign-in and password resets, and delivering contact-form messages to the site owner.
- Sentry — error reports when something breaks. These are filtered to strip email addresses and database values before they are sent.
We do not sell your information, share it for advertising, or hand it to anyone else except where the law requires it.
Where it lives
On servers in the United States. The database is not reachable from the public internet — only this application can connect to it.
Your choices
You can see and change your account details, and your site content, at any time by signing in. You can delete your account yourself, from Settings: that removes the account, every project on it, all of their pages, and every file you have uploaded. It cannot be undone.
If you have a paid subscription, cancel it before deleting your account — we will not delete an account while one is still active, because the charges would carry on after you lost the ability to stop them. Use Update Subscription on your project, which opens Stripe’s own billing page, or tell us and we will cancel it for you.
Contact
Questions about any of this, or a request about your data: support@domfly.com.