Privacy Notice

Version 1.6 · November 11, 2026

This notice explains what Osher Mevin, Inc., doing business as Message Domains (“we”), collects when you use messagedomains.us, visit an address we operate, complain about an address, list a domain with us or receive an email from us, and what we do with it.

1. Summary

Visitors to leased addresses are not tracked. We set no cookies on them, and we never store their IP addresses in readable form.
We collect what we need to run leases, check content against our rules, handle complaints and meet legal record-keeping duties, and no more.
We do not sell personal information, share it for cross-site advertising, or use it to train models.
Some records are public by design: the political-use registry, the name on a Hosted Page if you choose to show it, and your name and email in a counter-notice you send.

2. What we collect

Who you are	What we collect	Where it comes from
Buyer	Email address; display name; Google account identifier if you sign in with Google; passkey public keys; buyer type, state and declarations you make at checkout; the labels, targets and page versions you submit, and the images you upload for a Hosted Page (we re-encode each one, which removes location and camera details); lease and billing history; a hashed device identifier and a hashed card fingerprint used to count leases per person	You; Google; Stripe
Buyer, when an ID or business check is needed	The result of the check, and the first name and surname printed on the ID, kept encrypted with the reference of the Stripe check they came from; for a label that is your own name (Terms 5.3(b)), also your written consent to the face comparison (we never receive the selfie, the ID images or facial measurements); for organizations, the legal name, website, EIN or state registration number (encrypted), mailing address, and the email address that confirmed the organization’s domain; for committees, the FEC committee ID and what the FEC publishes about the committee (name, treasurer, address, status), and the “Paid for by” line you give	Stripe Identity; you; the FEC’s public records
Buyer of a political-use lease	The registry fields in section 6, and your mailing address (the street line kept encrypted)	You; our records
Visitor to a leased address	Date, the address visited, whether the visit came from the QR code, the referring site’s domain, the US state inferred from the network, and a daily-rotating keyed hash of the IP address used only to count unique visits	Our edge servers
Complainant or named person	Name, email, postal address, organization, the statement and rules you cite; for named people, the result of an ID check, the first name and surname printed on the ID, and the name you type to sign the sworn statement (both kept encrypted), and which public-list entries, if any, matched your name; for a legal representative, also the name of the person they act for and how (kept encrypted), and the document showing their authority	You; Stripe Identity; public lists of candidates and officeholders
Member or invitee of an organization account	Email address, role, who invited you and when, and when you accepted; for the organization, its name and its plan’s status and billing history	The member who invited you; you; Stripe
Person asking for a full political-use record	Name, email address, the record asked for, when, a one-way hash of your IP address, and the files we sent	You
Person asking to be notified when a verb or label opens	Email address and the verb or label	You
Person asking for a verb on the wishlist	The verb, when, and a keyed hash of your account, or of your IP address with a key that changes every day, used only to count each person once per verb	You
Domain owner	Name or company, email, domain, signed agreement and its signature record, payout status, tax information held by Stripe	You; Stripe; public registration data
Domain owner we contact about listing a domain	The domain, the kind of channel we used, the dates and the stage of the conversation. We look up the published contact address when we send and do not keep a copy of it. If you opt out we keep a one-way hash of the address so we never contact it again. If you reply, we keep your message and address with that conversation until 90 days after it closes	Public .us registration data; marketplace listings; your reply
Anyone who writes to us	The message and your contact details	You

Card numbers, bank account numbers, ID images and selfies go only to Stripe. We never store them.

Biometric information. The own-name check (Terms 5.3(b)) compares a live selfie with the photo on your ID. Stripe collects the images and the face measurements for us, only after you consent, and deletes them at our request as soon as the check is done. We never receive them. Our Biometric Information Policy explains this in full; Washington residents should also read our Washington Consumer Health Data Privacy Policy.

3. How we use it

To provide leases: sign-in, checkout, routing addresses, print kits, visit counts, renewals and refunds.
To run the compliance check. Labels, page text and redirect-target snapshots are sent to model providers (section 5). We send them your buyer type and state, never your name, email or payment details.
To answer email to support@. A model drafts a reply to each message from fixed facts about the product and billing; we send it only after a person reads and approves it. The model receives the subject, the text and the domain of your email address, not the address itself.
To verify identity when these terms or the law require it.
To process complaints, counter-notices, copyright notices and legal process.
To keep the records the law requires, including records of political-use leases.
To pay domain owners their share.
To prevent fraud and abuse, and to secure the service.
To send service emails. Owner-outreach emails are covered by section 7.

Our legal bases, where they apply, are performance of our contract with you, our legal obligations, and our legitimate interests in running a safe service that follows its published rules.

4. What is public

Your address and its content are public on the internet, as is any page your address points to.
Hosted Page author line. It shows “an individual” unless you choose to show your verified name. For organizations and committees it shows the organization’s name, and for committees the “Paid for by” statement.
Political-use registry. See section 6.
Counter-notices. If you send one, the complainant receives a copy with your name and email address. Your postal address is not included.
Complaints. We forward complaints to the buyer with the complainant’s name and email address, never the postal address.
Copyright notices. We forward a DMCA notice to the buyer with the sender’s name, email address and description of the work and material, never the sender’s postal address or telephone number. If the buyer sends a counter-notice, the law requires us to send it to the sender, including the buyer’s name, email, postal address and telephone number; the buyer is told this on the counter-notice form.
Transparency reports contain only totals, never personal information.

We use these service providers. Each processes data only to provide its service to us.

Provider	What it does for us
Cloudflare	Hosting, databases and backups, DNS, edge routing, storage, email sending and receiving, bot protection
Stripe	Payments, tax, invoices, identity checks, payouts to domain owners
Google	Sign-in (only if you choose it)
OpenRouter	Passes the compliance check to the model providers below and back
Anthropic, OpenAI, Google, xAI	The compliance check, including a Hosted Page’s images once the lease is paid; legal-document field extraction and support reply drafts (Anthropic only)
Twilio	Phone verification, when we ask for it

We also disclose information when the law requires it, as described at messagedomains.us/legal-process; to protect someone’s safety; and to a successor if our business is transferred, under this notice.

6. Political-use registry

For every lease about a candidate, an officeholder or a ballot measure, we keep and publish for at least five years: the address; the sponsor’s name (verified name, organization or committee); the sponsor’s city and state; what the lease is about; the service and dates; the amount paid; and whether the buyer declared it or the compliance check found it. The sponsor’s full address is kept in the record and provided to members of the public who ask, from the record’s page at messagedomains.us/registry. Organizations’ and committees’ addresses are published in full. For an individual, the sponsor’s name is the name on the ID check.

7. Owner outreach

When we invite the owner of a verb domain to list it, we use contact details published in the domain’s .us registration record, a marketplace listing or a registrar’s contact form. We send at most three messages about a domain, each with an opt-out link. We do not copy registration data into a database; we keep only what section 2 describes. To opt out, use the link or write to owners@messagedomains.us.

8. How long we keep it

Record	Kept for
Declarations, ToS acceptance, page versions, target snapshots, compliance decisions, complaint and legal records	At least 5 years after the lease ends; longer if a legal hold applies
Images uploaded for a Hosted Page	With the page versions that used them (row above); an image no paid page used is deleted 30 days after upload
Payment records	7 years
ID and business check results	5 years for committees and political-use leases; 2 years after the lease ends for everyone else
The name on your ID from any other ID check	90 days after the check, then deleted. A political-use lease bought in that time keeps it in its registry record (section 6)
The name on your ID from an own-name check (Terms 5.3(b))	2 years after the last lease under that name ends (5 years for political use); 90 days after the check if no lease used it; then deleted. The reference of the check and its date stay as the record that it passed
ID images, selfies and face measurements	Never held by us. Stripe deletes them at our request when the check passes, or 2 days after a check that did not pass or was not finished (see the Biometric Information Policy)
Consent to the face comparison	Indefinitely, in an append-only log, as proof of consent
Raw visit events	90 days
Daily visit totals	2 years after the lease ends
Application logs (no personal information)	30 days
Organization invitations	As long as the organization account exists
Full-record requests (Political-Use Records Policy section 4)	As long as the record they asked for
Notify-me requests	Until we send the notice, then deleted
Wishlist votes	2 years, then deleted (the count of each verb stays)
Opt-out hashes	Indefinitely, so we never contact the address again
Operator action log	Indefinitely

Records under a legal hold are kept until the hold ends. Some records are append-only and cannot be edited; if you ask us to correct one, we add a correction instead.

9. Your choices and rights

Access, correction, deletion and copies. Account holders can download their data and ask to delete their account from the account page. Anyone else, or anyone who prefers email, can write to privacy@messagedomains.us. We answer within 30 days, and within 45 days where state law allows that period.
Deletion limits. We keep records the law requires, records needed to defend legal claims, and records under a legal hold, for the periods in section 8. We delete everything else.
State privacy rights. Residents of California and other states with privacy laws have the rights those laws give, including to know, delete, correct and opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising, and we honor Global Privacy Control signals. We will not treat you differently for using your rights. An authorized agent may act for you with your written permission; we verify requests by email.
Emails. Service emails about your leases cannot be turned off while you have an active lease. Notify-me and outreach emails have an opt-out link in every message.

10. Security

We use encryption in transit and at rest, passkeys and hardware keys for operator access, least-privilege credentials and append-only audit logs. No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.

11. Children

The service is for people 18 and older. We do not knowingly collect information from children. If you believe a child has given us information, write to privacy@messagedomains.us and we will delete it.

12. Where data is processed

We and our providers process data in the United States. If you use the service from elsewhere, you understand that your information will be processed in the United States.

13. Changes

We post changes here and email account holders about material changes at least 30 days before they take effect.

14. Contact

privacy@messagedomains.us · Osher Mevin, Inc., 16192 Coastal Highway, Lewes, Delaware 19958