Privacy
TakenYet stores the minimum needed to run daily search limits, keep your account, and show you your own past work. Raw IP addresses are never written to the database, card numbers never reach our servers, and there is no advertising or cross-site tracking on this site. The detail below matches what the application code actually does.
What is collected
Four things: your email address and a salted scrypt hash of your password if you create an account; a per-period usage counter used to enforce search limits; the description you typed and the names and availability results returned for it; and any domains you star into a shortlist. Nothing else about you is recorded.
The usage counter is keyed by identity, not by person. Signed-in requests are counted against your user id. Anonymous requests are counted against a SHA-256 hash of the request IP address, truncated, and it is the hash that is stored. The address itself is used in memory to compute the hash and is then discarded. Counters are grouped by day for free plans and by calendar month for paid ones.
What is not collected
No raw IP addresses, no card numbers or bank details, no analytics or advertising cookies, no fingerprinting, no location data, and no third-party trackers. Payments run entirely through Stripe. The application stores only a Stripe customer id string and your plan name so it knows which limit applies. It never sees your card.
Which third parties are involved
Four, each for a specific job. Our AI provider receives the idea description you type, in order to generate names. Stripe handles checkout, billing and subscription state. The domain registries receive the candidate domain names being checked, which is the lookup itself. Google Fonts and Fontshare serve the typefaces used in brand kits, so your browser requests font files from those hosts when a kit renders. Each of these providers has its own privacy policy.
Do not put confidential information into the search box. The description is sent to a model provider and stored alongside its results.
Cookies
One cookie, named ty_session. It holds a random session token, is HttpOnly and SameSite=Lax, is marked Secure in production, and expires after 30 days. It exists only to keep you signed in. There are no analytics, marketing or preference cookies, so there is no consent banner to click through.
Retention and deletion
Session records are deleted when you sign out and expire on their own after 30 days. Usage counters are written per period and are not tied to an identifiable person once a period has passed. Searches and shortlisted favourites are kept while your account exists so that history and saved names still work when you come back. Deleting your account removes your user row, and its sessions, searches and favourites are removed with it.
To delete your account or request a copy of what is stored about you, email [contact email] from the address on the account. Billing records held by Stripe are subject to Stripe's own retention rules and financial record-keeping obligations.
Changes
Material changes to this page will be reflected in the date below. Related reading: terms, about TakenYet, pricing, and the FAQ. You can also start a search on the home page without an account.
Last updated: 18 July 2026. Questions: support@takenyet.com.