privacy policy

maxi@domains:~$ cat legal/privacy.md

privacy policy

last updated 2026-10-30. effective 2026-10-31 (12:00 AM Eastern). operator: PixelMint LLC, contact [offers@maxi.domains](mailto:offers@maxi.domains).

launch phase: until Jan 3, 2027, maxi.domains sells only its own (house) domains. PixelMint LLC is the seller, you pay our own wallet directly, and no multisig payment is involved. third-party listings, seller accounts and the 2-of-3 multisig settlement open on Jan 3, 2027; the parts of this page about them apply only from that date.

we collect as little as we can.

what we store

  • contact details: your name, postal address, email address and phone number. today the site asks only for your email address (and, for a purchase, the registrar account the domain is pushed to). we may request your name, postal address and phone number when we need them to complete a sale, domain transfer or refund, to resolve a dispute, to prevent fraud, or to meet tax, accounting or other legal obligations. we keep them with the order records.
  • accounts: your email, a scrypt hash of your password (never the password itself), an optional display handle, an optional two-factor secret, when and from which IP address you accepted each version of the terms and seller warranties, and your active login sessions (time, IP address, browser name). we never ask for your name, address, phone number or any ID.
  • buyers: your email, the multisig payment address and payment transactions for your order, and the registrar account id you give us.
  • sellers: your email, payout address, registrar and listing details.
  • offers: your email, the offer amount and message, and your IP address (for abuse limits).
  • newsletter: your email, when you signed up and confirmed, and whether you unsubscribed.
  • server logs: IP address, time and page requested, kept for up to 14 days for security and debugging.

we use no analytics, no tracking pixels, no advertising cookies and no javascript. the only cookie is the admin login cookie, which visitors never get.

who we share it with

  • resend (resend.com) sends our transactional email and newsletter.
  • purelymail (purelymail.com) hosts our inbox at offers@maxi.domains.
  • hetzner (hetzner.com, germany) hosts the server.
  • mempool.space is queried for multisig payment addresses so we can see payments. bitcoin transactions are public by design.
  • the registrar of a domain sees the account details needed for a push.

we never sell your data.

how long we keep it

order and payout records are kept as long as we need them for accounting and disputes. when you delete your account we remove your email, password hash, handle, two-factor secret, sessions, price alerts and newsletter subscription at once; your orders, multisig transactions, accepted terms and audit entries are kept for 6 years, linked to a pseudonymous id. newsletter data is deleted on request. backups are kept for 14 days.

your rights

ask for a copy of your data, a correction or a deletion at [offers@maxi.domains](mailto:offers@maxi.domains). every newsletter has a one-click unsubscribe link.

data controller: PixelMint LLC, operator of maxi.domains. this policy is governed by the laws of the State of Florida, USA.