26/12/2020
1. Current cookie and tracking position
Rocket Domains aims to keep its websites, customer portals and service interfaces privacy-respecting, secure and functional. This Cookie and Tracking Notice explains how Rocket Domains Limited, company number 11431904, uses cookies, local storage, session storage, scripts, device/browser information, technical logs and similar technologies on its public website, customer account area, checkout flows, domain search tools, parking pages and related service portals.
As of this Notice, Rocket Domains does not intentionally deploy Google Analytics, advertising cookies, behavioural advertising, retargeting pixels, social-media tracking pixels, profiling cookies, cross-site advertising identifiers, session-recording tools, heatmaps, third-party marketing tags or comparable optional tracking technologies on its public website or customer account area.
Rocket Domains uses cookies and similar technologies where they are needed to provide requested services, operate the customer portal, keep users signed in during a session, secure accounts, prevent fraud, process payments, remember service choices, maintain shopping carts, search and provision domain names, route users to product portals, operate webmail and control panels, and protect Rocket Domains’ websites, portals, products, services and infrastructure.
Because Rocket Domains currently uses these technologies for strictly necessary, security, payment, service-provisioning or user-requested purposes, Rocket Domains does not display a general Accept/Reject cookie banner on its public website or customer account area. Rocket Domains provides this Notice so users can understand the technologies used and how to manage them. If Rocket Domains later introduces optional analytics, advertising, retargeting, affiliate tracking, social-media plug-ins, embedded-media tracking, session recording, heatmaps, optional chat or marketing tools, or non-essential personalisation technologies, Rocket Domains will update this Notice and provide consent, objection or preference controls where required by law.
2. Essential and service-related technologies Rocket Domains may use
Account and portal session technologies. These technologies maintain login sessions, support authentication, prevent cross-site request forgery, detect suspicious activity, remember whether a browser accepts cookies, route requests, balance traffic, secure forms and keep the customer account area functioning.
Checkout, billing and provisioning technologies. These technologies maintain shopping carts, order forms, invoice actions, renewal flows, provisioning steps, service selections, domain searches, currency selections, language preferences, account settings, dashboard functions and product-management workflows.
Security and fraud-prevention technologies. These technologies help protect accounts, payment flows, service portals, domain search tools and infrastructure against fraud, abuse, hacking, bot activity, brute-force attacks, credential-stuffing, account takeover, spam, malware, unauthorised access, scraping, denial-of-service activity and technical faults.
Payment technologies. Rocket Domains uses payment providers such as Stripe and PayPal through its billing and customer account systems. These payment providers may use cookies, scripts, device/browser signals and similar technologies during checkout, payment authentication, Strong Customer Authentication, 3D Secure, saved payment method handling, fraud prevention, risk scoring, dispute handling and payment security. These technologies form part of the payment process requested by the user. Payment providers process personal data under their own terms, privacy notices and security requirements.
External service portal technologies. Hosting panels, webmail portals, workspace dashboards, DNS, CDN, security, backup, domain-management and other product interfaces may use cookies and similar technologies for login, authentication, session management, language settings, preferences, service operation, technical logs, security and abuse prevention. Some portals may be branded or white-labelled as Rocket Domains services while using third-party infrastructure or software.
Remember-me and preference technologies. If a user selects “Remember Me” or a similar feature, a persistent cookie or equivalent technology may be used to remember the user’s login or session preference. Users can avoid this by not selecting the feature and can clear cookies through browser settings.
3. Technologies Rocket Domains does not intentionally use for its own website and customer account area
As of this Notice, Rocket Domains does not intentionally use Google Analytics, advertising cookies, behavioural advertising, retargeting pixels, social-media tracking pixels, third-party marketing tags, cross-site profiling technologies, session-recording tools, heatmaps or comparable optional tracking technologies on its public website or customer account area.
Rocket Domains also does not intentionally use cookies to sell personal information or to share personal information for cross-context behavioural advertising.
Some customer-purchased services, third-party tools, customer websites or customer-managed apps hosted through Rocket Domains may include their own analytics, SEO, advertising, tracking, embedded content, cookie or similar technologies. Customers are responsible for ensuring that their own websites, apps, portals and end-user services have lawful cookie notices, consent mechanisms and privacy disclosures where required.
4. Google Fonts and external fonts
Rocket Domains websites may use web fonts. If fonts are self-hosted by Rocket Domains, font files are served as part of the website and do not involve a font provider receiving visitor requests. If fonts are loaded from an external provider such as Google Fonts, the visitor’s browser may send technical request data such as IP address, requested URL, user-agent and referrer to that provider. Google states that the Google Fonts API is unauthenticated and does not set or log cookies, but receives technical request data needed to serve fonts.
External fonts are not the same as analytics or advertising cookies, but they may still involve personal data such as IP address and may involve processing outside the United Kingdom. Rocket Domains prefers self-hosted fonts where practicable. Where externally hosted fonts are used, this Notice discloses that use and Rocket Domains reviews whether additional measures are appropriate in the relevant circumstances.
5. Domain searches and availability checks
When a user searches for, checks the availability of, configures, registers, transfers, renews or manages a domain name, Rocket Domains may process technical information connected with that activity. This may include the domain name or search term entered, requested extension, search results, timestamps, IP address, user-agent, browser and device information, session identifiers, account identifier where logged in, referrer URL, rate-limit status, fraud or abuse signals, error messages and related technical logs.
Rocket Domains uses this information to provide domain search and registration functions, return availability results, troubleshoot errors, maintain service reliability, detect and block malicious bots, scraping, credential-stuffing, spam, abuse, fraudulent orders, excessive automated queries and denial-of-service activity, apply fair-use and rate limits, protect registry and registrar systems, investigate security incidents, comply with registry, registrar, ICANN, ccTLD, legal and law-enforcement requirements, and enforce Rocket Domains’ terms and policies.
Access to domain search and availability logs is limited to authorised Rocket Domains personnel and authorised service providers, contractors, registrars, registry service providers, infrastructure providers, security providers, support providers, legal advisers and other parties who need access for the purposes described in this Notice and Rocket Domains’ Privacy Policy. Rocket Domains may also disclose relevant logs to registries, registrars, payment providers, law enforcement, regulators, courts, dispute-resolution providers or complainants where required or permitted by law, policy, contract or abuse-handling processes.
Routine domain search and technical logs are normally retained for a limited period needed for service operation, security, troubleshooting, abuse prevention and rate-limit analysis. Security, abuse, fraud, dispute, payment, domain-registration, legal or enforcement records may be retained for longer where necessary to protect Rocket Domains, its users, registries, registrars, service providers and the public, to comply with law or contractual obligations, or to establish, exercise or defend legal claims.
6. Domain parking, default pages and non-tracking information cards
If a domain uses a Rocket Domains free parking page, holding page, default page, renewal page, marketplace notice, informational card or service-link page, Rocket Domains may process limited technical information needed to display, secure and operate that page. This may include IP address, user-agent, browser and device information, requested URL or domain, timestamp, referrer URL, language settings, error logs, security logs, abuse signals and basic click or request logs.
Rocket Domains uses this information to display the page, maintain security, prevent abuse, detect bots or denial-of-service activity, troubleshoot errors, operate domain-management functions, provide renewal or restoration information, protect domain and DNS infrastructure, enforce Rocket Domains’ terms, and keep appropriate technical and legal records.
Rocket Domains may display non-tracking informational cards, service links, renewal links, marketplace notices, domain-management links, security notices, account notices, abuse notices, legal notices or other general information on parked, expired, suspended, reserved, default, holding or unconfigured domains.
Where Rocket Domains records page requests or clicks on service links, renewal links, marketplace links or informational cards, it does so through ordinary technical request logs or equivalent non-tracking operational logs. Unless stated otherwise, Rocket Domains does not use behavioural advertising cookies, tracking pixels, profiling cookies, third-party ad-tech cookies, cross-site advertising identifiers or personalised advertising feeds on its domain parking or default pages.
If Rocket Domains later introduces optional analytics, advertising, tracking, measurement or similar non-essential technologies on domain parking or default pages, Rocket Domains will update this Notice and seek consent where required by law.
7. Cookie banner position
Based on Rocket Domains’ current configuration, Rocket Domains does not display a general Accept/Reject cookie banner because it does not intentionally use Google Analytics, advertising cookies, behavioural advertising, retargeting pixels, social-media tracking pixels, cross-site profiling technologies or comparable optional tracking technologies on its public website or customer account area.
Rocket Domains may use cookies, local storage, session storage, scripts and similar technologies without a consent banner where they are strictly necessary or otherwise legally exempt for the service requested by the user. This includes technologies needed for login, account security, fraud prevention, authentication, checkout, payment authentication, shopping carts, language or currency selections, password reset, service provisioning, control panels, webmail, routing, load balancing, technical fault detection, abuse prevention, rate limiting and platform security.
This position depends on the technologies actually deployed. Rocket Domains will introduce a cookie banner or equivalent consent or preference mechanism before setting or allowing any non-essential cookies or similar technologies where consent is required by law, including analytics cookies, advertising cookies, behavioural advertising, retargeting pixels, social-media pixels, affiliate or link-tracking cookies, heatmaps, session-recording tools, optional chat or marketing tools, profiling technologies, embedded media that sets non-essential cookies before user interaction, or any multi-purpose technology that is not limited to an exempt purpose.
8. Managing cookies and preferences
Users can control cookies through their browser settings. Blocking or deleting cookies may prevent login, checkout, payment, password reset, product provisioning, webmail, control panels, support, security checks and other services from working correctly.
If Rocket Domains introduces optional cookies or similar technologies that require consent, Rocket Domains will provide appropriate consent, objection or preference controls where required by law.
9. Third-party portals, payment providers and customer-controlled services
Some services supplied through Rocket Domains are accessed through external or white-labelled portals, payment provider interfaces, registrar or registry systems, webmail interfaces, hosting panels, workspace dashboards, security tools, backup tools or other product environments. These services may use their own cookies, local storage, scripts, device/browser information and similar technologies for authentication, service operation, security, payments, abuse prevention, language settings, preferences and technical logs.
Where a third-party service or portal is used, the relevant provider’s own terms, privacy notices and cookie information may also apply. Rocket Domains is not responsible for cookies or similar technologies deployed by customer-controlled websites, customer-installed apps, customer-selected plug-ins, customer content, or third-party services outside Rocket Domains’ control.
10. Changes to this Notice
Rocket Domains may update this Notice as its website, customer portal, payment flows, product portals, suppliers, laws or technology change. Rocket Domains periodically reviews its public website, customer account area, checkout, payment flows, domain search tools, parking pages and external service portals to check that this Notice remains accurate.
11. Contact
Questions about this Cookie and Tracking Notice can be sent to Rocket Domains at legal@rocket.domains.