Privacy notice · updated 22 October 2026
What we keep about you, and why
Namefold helps you make and check brand names. We keep only what we need to do that, we never sell it, and you can download or delete it at any time.
This notice is also available in other languages. If a translation differs, this English version prevails.
Without an account
You can check names, create a brand and ask questions without an account. So that you can come back to your work, we keep it for 30 days after your last visit: the names you checked with their reports, the website you entered, your answers to the questions (including what you tell us about your business), your questions to our AI with its answers, and the language of the site you use, so that our e-mails come in it. A cookie in your browser connects you to this saved work. A PDF you drop in is read in your browser; it is not uploaded.
If you start the questions over, your earlier answers stay with your saved work too.
We look at this saved work to see what people search for and ask, so we can make Namefold better. After 30 days without a visit it is deleted. If you sign up from the same browser, it stays with your account until you delete the account.
When you check a name, we look it up for you in public registers: TMview and the EU trademark office (EUIPO), the domain registries, Companies House, Apple's App Store, and the public profile pages of X, LinkedIn, YouTube and Telegram. We send them the name only. We keep their answers for up to 24 hours so the same name is not looked up again, with nothing that links them to you.
When you ask a question, or when a check is summed up, the text goes to Anthropic, whose AI writes the answer, and sorts your questions into a topic for us. To stop abuse we count requests per network address for 24 hours.
Send me a link to continue. If you give us your e-mail under a report or a conversation, we send you a link that opens your saved work in any browser. If you start signing up but do not open the e-mail, we may send you that link once more. Every such e-mail has a link to stop them.
Analytics, only if you allow it
A small banner asks once whether you allow analytics. If you choose Accept, we also keep with your saved work: where your visit came from (the site that linked to us, without its search words, and campaign tags in our links), the first page you opened, the pages you open, your country, region and city and the name of your internet provider (worked out by Cloudflare from your connection; we never store your internet address), your type of device, your browser and your language. If you choose No, we keep none of this. You can change your answer at any time with ; choosing No later deletes what was kept.
For every visit, with or without your answer, we count visits per day, country and kind of referrer (for example search or social). These counts are not linked to you or your saved work.
With an account
| What | Why | How long |
|---|---|---|
| Your e-mail, name, photo, language and design choice | Your account and signing in | Until you delete the account |
| Your sign-up (name, e-mail, company) until you open the e-mail link | Opening your account | Until the account opens; links 7 days |
| Sign-in sessions (browser name, times) and one-use sign-in links | Keeping you signed in safely | Sessions 30 days after last use; links 15 minutes (invitations 7 days) |
| Password, two-step sign-in, recovery codes, passkeys | Signing in. We keep only hashes and public keys, never the password itself | Until you change or remove them |
| Workspaces, memberships and invitations | Who works where, with which role | Until removed; invitations 12 months after they end |
| Failed sign-ins and limits (e-mail or network address, time) | Stopping abuse | 24 hours |
| Record of actions (who did what, when) | Accountability for changes to accounts | 12 months; after you delete your account it keeps no name or e-mail |
| Work saved before and after signing up in the same browser (checks, answers, questions, analytics if you allowed them) | Your own work, in one place | Until you delete the account |
Who helps us
- Cloudflare runs the site and the database (primary location in Western Europe).
- Bird (Bird B.V., Amsterdam, Netherlands) sends our e-mails once it is set up: sign-in links, invitations and account notices.
- Resend sends our e-mails until then, and whenever a send through Bird fails.
- Anthropic writes the summary of a check, answers your questions and sorts them into topics, when that is turned on.
- TMview and EUIPO, the domain registries, Companies House, Apple, X, LinkedIn, YouTube and Telegram answer the look-ups of a name check. We send them the name only. Your browser asks Apple's App Store directly, so Apple also sees your internet address.
- Have I Been Pwned checks a new password against known breaches. Only the first five characters of the password's SHA-1 hash are sent; the password never leaves.
Cookies
Four cookies, all our own, none from third parties:
- nf_consent remembers your answer to the analytics banner, so it is asked only once on the whole site. Kept 6 months.
- visitor connects your browser to your saved work. It is set when you save work (a check, an answer, a question, your e-mail) or allow analytics. Kept 30 days after your last visit.
- session keeps you signed in, only when you sign in. Kept 30 days after your last visit.
- nf_lang remembers the language you chose, on the whole site and in your account, so it is asked only once. Kept 12 months.
The visitor, session and nf_lang cookies are needed for the service you ask for, so we do not ask for consent for them. Your design choice and a copy of your work are also kept in your browser's local storage.
Your rights
You can see and download everything we keep about you, correct your name, and delete your account in Profile and data. Deleting removes your account, sign-ins, passkeys and memberships at once. For anything else, or a question, write to hello@namefold.app. You can also complain to your data protection authority.