Privacy policy

1. Who is responsible for your data

The controller of your data is DomaineGoat LLC, incorporated in Panama, the operator of Isthmus Domains. We process personal data under Ley 81 de 26 de marzo de 2019 on the protection of personal data, in force since 29 March 2021, and its regulation, Decreto Ejecutivo N° 285 of 28 May 2021. The supervisory authority is ANTAI. Contact: [email protected].

2. What we collect

We collect only what the service needs:

• One email address per domain, required and verified. It is the only contact data we collect. ICANN rules require the registrant contact to be verified: the registrant email is verified after registration, as ICANN rules require (within 15 days). It is kept private and stays out of the public WHOIS where the registry allows privacy.
• No name, postal address or phone number. We do not ask for them. With a standard registration, the domain is in your name: the registrant record is built from your verified email. Extensions whose registry needs a name and address are sold only with Domain protection, so that registry receives the details of DomaineGoat LLC.
• No email to open an account. Opening the account itself needs no email; the email is asked when you register a domain, one for each domain.
• Account and order data: your domains, DNS settings, orders, renewals and balance.
• Payment data: the coin, the network, the amount and the transaction ID (TXID) of each top-up. These are public on the blockchain by nature.
• Technical data needed to run and secure the service, such as sign-in events, kept only as long as security requires.

3. What we never collect

We never ask for or store:

• a passport, ID card, driving licence or any other identity document;
• a selfie or a video check;
• an ID number, tax number or social security number;
• card numbers or bank details, since we accept crypto only;
• your wallet private keys or seed phrase.

We never ask for your password, your account number or your domain transfer (EPP) codes by email or chat.

4. Why we use your data

We use your data to register and renew your domains, to send them to the registry, to run DNS, to credit your top-ups, to answer support requests and to meet ICANN duties such as the email check. We do not sell your data, we do not use it for advertising and we do not share it with data brokers.

5. Who receives your data

• Our ICANN-accredited registrar partner, through which domains are registered. It receives the registrant record built from your verified email; with Domain protection, the registrant record carries the company's details.
• The registry of your extension, when it holds registrant data, such as .org (PIR) or .io (Identity Digital), keeps its own copy under its own law. The .com and .net registries (Verisign) are thin registries and receive no registrant contact data. With Domain protection, a registry receives the company's details.
• Public WHOIS and RDAP show only what the registry and the registrar publish; with privacy, your email is hidden where the extension allows it. RDAP replaced WHOIS on 28 January 2025, and anyone can check a record at lookup.icann.org. See check what WHOIS shows.

DomaineGoat LLC itself releases the data it holds only in the cases of section 6.

6. When your data can be disclosed

DomaineGoat LLC releases the data it holds only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. A foreign lawyer, a private company or a foreign government must go through Panamanian legal process first; a foreign judgment counts once the Fourth Chamber of Panama's Supreme Court has recognised it. In a UDRP case, the dispute provider receives the registrant record. The reasons behind this rule are on why Panama.

7. How long we keep it

We keep account and domain data while your account or domain exists. After that, we keep only what ICANN rules or Panamanian law require, for the period they require, and then delete it. Payment records are kept as long as the law requires for accounting.

8. Your rights under Ley 81 de 2019

Under Ley 81 de 2019, you have the rights known in Panama as ARCO rights, plus portability:

• Access: to know what data we hold about you;
• Rectification: to correct data that is wrong or out of date;
• Cancellation: to have data deleted when it is no longer needed, within the limits of ICANN rules and the law;
• Opposition: to object to a use of your data;
• Portability: to receive your data in a structured format.

To use these rights, write to [email protected] from the verified email of one of your domains. ANTAI is the authority that supervises the law.

9. Security

Access to customer data is limited to the people who need it for support, abuse handling and billing. The client area uses encrypted connections (HTTPS). You can reduce your own exposure with Domain protection, which takes you out of the registrant record held by our registrar partner and the registry, for +$29 a year per domain on top of the price on the pricing page.

10. Changes and contact

We may update this policy when the law or ICANN rules change; the date at the top shows the version in force. Questions and requests: [email protected]. This page describes our practice and is not legal advice.