Data use
Privacy and data use
Naming work can be commercially sensitive. This notice explains what the product sends, stores, measures, and deletes so you can decide what belongs in a brief.
Last reviewed
Product data
What a naming exploration processes
A naming project can contain your idea, audience, promise, traits, required and banned terms, domain policy, generated brands, checked domains, provider status, prices, feedback, and refinements. Do not put secrets, personal data, or confidential client information in a brief unless you are comfortable with the processing described here.
OpenAI processes the brief and structured naming evidence to generate and evaluate brand concepts. Fastly receives domain labels for current research. Cloudflare runs the application, Workflow, security controls, and D1 storage.
Accounts
Authentication uses the minimum required account data
If you sign in, the product stores the account and session information needed for Google or email magic-link authentication. Google participates only when you choose that sign-in method. Resend delivers requested magic-link emails, and Cloudflare Turnstile protects that flow.
Retention and control
Projects have explicit retention
Guest naming projects are deleted after seven days. Account-owned naming projects remain until you delete them. The active workspace shows guest expiry and provides an immediate project-delete action; deletion cascades through explorations, pages, concepts, domain variants, offers, evaluations, and feedback.
Measurement
Analytics measures visits and interactions
PostHog creates profiles for anonymous and signed-in visitors and uses persistent identifiers in cookies and local storage. It collects page URLs, referrers, campaign parameters, approximate location derived from the network address, device and browser details, page views and exits, clicks, form interactions, scroll depth, performance measurements, and application errors. Signed-in profiles can also contain the account ID, name, and email.
Session replay records each visit, and heatmaps and automatic interaction capture show how the interface is used. Form input values are masked in replay, and explicit funnel events exclude briefs, brand names, domains, evidence, and prices; however, visible interface text can appear in replay and automatically captured interactions. Do not enter secrets or personal data that you do not want processed for analytics.