Privacy policy

Account data: your name, email address, phone number, organisation and a hashed password (or your Google account ID if you sign in with Google).

Registrant data: the contact details you provide for domain registrations (name, organisation, address, email, phone) and supporting documents for restricted zones.

Operational data: IP addresses, request logs, audit events and billing records needed to run and secure the registry.

To register and maintain domain names, operate DNS, process payments and send service notices (renewals, transfers, security alerts).

To prevent abuse and fraud and to meet our legal obligations in Nepal.

We do not sell personal data.

Payments are processed by eSewa, Khalti or Stripe (cards). We receive the payment status and reference, not your full card number or wallet credentials.

Registrant contact details are redacted from public WHOIS and RDAP by default, unless you opt in to publication or disclosure is required by law.

We use an httpOnly session cookie to keep you signed in, small marker cookies that indicate whether a session exists, and a NEXT_LOCALE cookie that remembers your language. They contain no personal data and are not used for advertising.

Registration records are kept for as long as the domain exists and afterwards for the period required by law.

You can view and correct your data in your account settings, or contact us to request export or deletion where the law allows.