Legal

Privacy policy

pendingdelete.net ("PendingDelete.net", "we"; formerly whoismania.com) is a domain and IP address lookup service. This policy describes the information we collect when you use the site, how we use it, how long we keep it, and the choices available to you. Effective date: October 9, 2026.

Information we collect

Lookups. When you search for a domain name or IP address, we record the query, the result returned, the source of that result (our index or a live registry query), the response time, your IP address, your browser's user-agent string, and the referring page, if any.

Request logs. Our web server records each request it receives: the IP address it came from, the page requested, the date and time, the user-agent string, the referring page, the response status, and the country and network (autonomous system) associated with the IP address, as reported by our content delivery provider.

Correspondence. If you write to us through the contact form, we keep your message, your name and your email address in order to respond.

Accounts. If you create an account, we keep your first and last name, your email address, a one-way hash of your password (never the password itself), whether you asked for the newsletter and when, when you accepted the Terms and conditions, when you confirmed your email address, and the date, time and IP address of the account's creation and of your most recent sign-in. When we email you a link (to confirm your address or to choose a new password), we keep a record that it was sent and when, and the IP address that asked for it.

We do not collect payment details or any other information beyond what is described above. The What's my IP page displays your own IP address and related request details back to you; that visit is logged in the same way as any other page view, and nothing additional is stored.

How we use it

We use this information to return lookup results and operate the site; to detect and block abusive traffic, such as automated flooding and vulnerability scanning; to diagnose incorrect results and improve the service; and to understand, in aggregate, which domain names people are interested in. Account details are used to run your account: to sign you in, to show your dashboard, to send you the emails your account needs (a link to confirm your address, a link to choose a new password when you ask for one) and, if you asked for it, to send you the newsletter once there is one. We do not use any of it for advertising, we do not build profiles of visitors, and we do not sell, rent or share it with third parties except as described in this policy.

Domain data

Domain names you look up may be added to our index and re-checked against the registry periodically. The index contains only public registry data about the domain, such as its status, registrar and key dates. It does not record who searched for it.

Retention

Lookup records and request logs are deleted automatically after 90 days. Aggregated daily counts of lookups per domain name, which contain no IP addresses or browser details, are kept indefinitely. An IP address or network blocked for abuse remains blocked until the block expires. Email correspondence is kept for as long as needed to respond and follow up, and is deleted on request. An account is kept until you ask us to close it, and is then deleted with its details.

Cookies

The site's own cookies are only those it needs to work. When you sign in, it sets one that keeps you signed in and one that tells the page to show your name in the header; both last up to 30 days, or until you sign out. The sign-in and account forms set one that protects them from forged submissions, until you close your browser. When you pass the site's bot check, it sets one that remembers this for a short while, so that you are not asked again on every page. Google Analytics sets cookies of its own, described below. We use no advertising cookies.

Service providers and third parties

Cloudflare. The site is delivered through Cloudflare, which processes requests in order to route, cache and protect them. Cloudflare's handling of that data is described in its privacy policy.

Postmark. The emails the site sends (the links above, and a copy of each contact-form message to us) are delivered by Postmark, which receives the address an email goes to and what it says. Postmark's handling of that data is described in its privacy policy.

Gravatar. If you have an account and turn on “Show my Gravatar picture” on Edit profile, the picture beside your name comes from Gravatar, when you have set one up there. To find it, our server sends Gravatar a fingerprint of your email address (its SHA-256 hash), about once a day; your browser never contacts Gravatar, and nothing else about you is sent. It is off unless you turn it on, and while it is off nothing is sent to Gravatar. Gravatar is run by Automattic, whose privacy policy applies there.

Google Analytics. Public pages use Google Analytics to count visits and to see how the site is used. It sets cookies in your browser and sends Google the page you are on, your IP address and details of your browser. Google describes its handling of that data in its privacy policy. It is not used on the administrative area.

Typefaces. The site serves its own typefaces. If the site's look is set to a typeface from Google Fonts, your browser requests that font from Google's servers, which receive your IP address as part of that request; Google describes this in its Google Fonts privacy notice.

Flag images. The small country flags shown beside country names are loaded from flagcdn.com. Your browser requests those images directly, so that service receives your IP address in the same way.

Registries. To answer a lookup, we query the relevant domain registry or regional internet registry. The query contains the domain name or IP address you entered and no information about you.

Registrars and backorder services. Result pages may link to third-party registrars and backorder services. If you register a domain after following one of these links, we may receive a referral commission. The links carry only the domain name you looked up. Once you leave our site, the third party's own privacy policy applies.

We may disclose information where required by law, or where necessary to protect the site and its users from abuse.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal information we hold about you, or to object to its processing. Because we hold very little, most requests can be resolved quickly. To make a request, write to us through the contact form, giving the email address on your account, or explain how we can verify that the IP address in question is yours. For visitors in the European Economic Area and the United Kingdom, our legal basis for the processing described above is our legitimate interest in operating and securing the service.

Children

The site is not directed at children under 13, and we do not knowingly collect personal information from them. Accounts are for adults (see the Terms and conditions).

Security

The site is served over HTTPS. Raw logs are stored on our own server, are not shared with analytics or advertising providers, and are purged on the schedule described above. Access to accounts and to the administrative area is password-protected and rate-limited, and passwords are stored only as one-way hashes.

Changes to this policy

We may update this policy from time to time. Changes take effect when they are posted on this page, and the effective date above is updated accordingly.

Contact

Questions about this policy or about your information can be sent through the contact form.