Domain Command

Privacy Policy

The short version: Domain Command stores all your data on your device and in your personal iCloud account. The developer never sees your data. There is no analytics, no tracking, and no third-party SDKs. The only network requests the app makes are WHOIS/RDAP lookups to public domain registries and SSL certificate checks — both essential to the app's core function — plus one optional, user-initiated diagnostic report.

1. Data Storage

All domain records, WHOIS and RDAP lookup results, SSL certificate details, notes, tags, and preferences are stored locally on your device using Apple's SwiftData framework. If you enable iCloud sync, your data is additionally stored in your personal iCloud account via Apple's CloudKit infrastructure. The developer has no access to your iCloud data.

2. Network Requests

Domain Command makes the following network requests, all essential to its core functionality:

WHOIS lookups — Raw TCP connections to public WHOIS servers (port 43) to query domain registration data. The queried WHOIS server can see your device's IP address and the domain you are looking up. This is inherent to the WHOIS protocol.
RDAP lookups — HTTPS requests to public RDAP servers to query structured domain registration data. Similar to WHOIS, the queried server can see your IP address and the domain name.
SSL certificate checks — HTTPS connections to domain servers to inspect their TLS certificates (issuer, validity dates). The target server can see your IP address.

These requests go directly from your device to public registry servers. No data passes through any intermediary server operated by the developer.

3. Optional Diagnostic Report

When the app cannot parse a domain's WHOIS or RDAP response, you may choose to send the public registry response to the developer to help improve format support. This is entirely opt-in — it requires an explicit button tap and is never sent automatically.

The report contains:

The domain name and TLD
The public WHOIS or RDAP response (publicly available data)
Which fields could and could not be parsed
App version and iOS/macOS version

The report does not contain any device identifier, user identifier, account information, IP address logging, or personal data. The developer uses these reports solely to improve the app's parsing capabilities.

4. No Analytics or Tracking

Domain Command does not include any analytics frameworks, crash reporting SDKs, advertising libraries, or third-party tracking code. No usage data, behavioral data, or telemetry is collected.

5. No Accounts

The app does not require or support user accounts. There is no sign-up, no login, and no user profile. Your identity is never known to the developer.

6. iCloud Sync

If enabled, iCloud sync uses Apple's CloudKit to replicate your domain data across your devices. This data is stored in your personal iCloud account and is governed by Apple's Privacy Policy. The developer cannot read, access, or modify your CloudKit data.

7. Notifications

Expiry reminders are scheduled as local notifications on your device. Notification preferences are controlled in the app and in iOS or macOS system settings.

8. Your Choices

You can delete tracked domains at any time.
You can disable notifications in the app or in system settings.
You can choose not to use the optional diagnostic report feature.

9. App Store Privacy Label

Domain Command's App Store privacy label declares:

Data Not Linked to You — Diagnostics (the optional parse failure report described in section 3)

No data is collected that could be linked to your identity.

10. Children's Privacy

Domain Command is not directed at children under the age of 13. The app does not knowingly collect any personal information from children.

11. Changes to This Policy

If this privacy policy changes, the updated version will be posted on this page with a revised date. Material changes will be noted in the app's release notes.

12. Contact

If you have questions about this privacy policy, contact the developer at support@tomaskafka.com.