privacy policy
This policy explains what data does.software collects when you use the site, what we use it for, and who we share it with. It applies alongside the Terms of Service.
1. who processes your data
does.software is responsible for the data we collect through this site. For anything related to your data, write to help@does.software.
2. what data we collect
When you create an account we store your email, username, and password, always as a hash and never in plain text. When you request a subdomain we store the name you asked for, the description you write, the redirect URL, and the forwarding inbox you set; if you request it as a guest, also the contact email you give us. To keep the service secure we store the IP you sign up with and the IP of every login, with its date. If you subscribe to Pro, Stripe gives us a customer, subscription, and checkout-session identifier; we never see or store your card number. Use of your subdomain (visits to the web redirect, forwarded mail) is counted in daily aggregate totals, with no IP or sender attached. If you scan a QR code on the service, we do log the IP, browser, referring page, and approximate location of that scan.
3. what we use it for
We use your data to provide the service (activate and run your subdomain, forward your mail, bill Pro if you subscribe), to keep it secure (spot duplicate accounts or abuse from IPs, log you out of other sessions if you change or recover your password), and to communicate with you (account verification, notices about your requests and subdomains, support replies).
4. legal basis
We process your data because it is necessary to provide the service you asked for, because we have a legitimate interest in keeping does.software secure and free of abuse, and because the law sometimes requires us to keep certain records, such as billing ones.
5. who we share it with
We share only what is strictly necessary with those who help us run the service: Stripe processes Pro payments, Cloudflare manages your subdomain's DNS, and transactional mail goes out through our own server. If you sign in with Google, Google handles the data from that sign-in under its own terms. We may hand over data to the authorities where the law requires it. We do not sell your data to anyone.
6. cookies and local storage
does.software does not use its own cookies. We store your session and your language in the browser's local storage (localStorage), not a cookie, readable only by your own device. If you sign in with Google or pay through Stripe, those two sites may set their own cookies while you interact with them, outside our control.
7. how long we keep it
We keep your account data for as long as your account stays active. You can delete your account yourself from your profile: we ask for a confirmation code by email and, once you confirm it, you have 7 days to cancel before we permanently delete the account, your subdomains, and your email forwards. If it's deleted for another reason, we retain the minimum needed to meet legal obligations or investigate abuse for a limited time, then remove it.
8. your rights
You can ask us to access your data, correct it, delete it, object to how we use it, or hand it to you in a portable format. Write to help@does.software and we will handle it; if you think we got it wrong, you can complain to the Spanish Data Protection Agency (AEPD).
9. security
Your password is always stored as a hash. Mail carrying sensitive links (verification, password recovery, deletion codes) travels encrypted. If you change your password through a recovery link, we close any other open session. You can also turn on two-factor verification from your account.
10. minors
does.software is not intended for minors. Do not use it if you are not old enough to accept these terms in your country.
11. changes to this policy
We may update this policy from time to time. When we do, we will change the date shown above. Continuing to use the service after a change takes effect means you accept it.
Questions about your data? Write to help@does.software.