Privacy Policy

June 19, 2026

Last updated: June 19, 2026

NameNesting (the "Service") is an independent project operated by an individual sole proprietor based in Pakistan. We take your privacy seriously. This policy explains, in plain language, what data we collect, why, how long we keep it, and your rights.

1. Who we are

NameNesting is run as a personal project — not a registered company — by an indie founder. Contact for all privacy-related questions: [email protected].

2. What data we collect

We collect only what we need to make the Service work:

Email address — when you create an account or join the waitlist. Used for login and product updates you opted into.
Favorite names — saved against your account so you can come back to them later.
AI request count — daily count of AI-generated insights, used to enforce free-tier limits.
Waitlist signups — your email and the plan you're interested in.
Analytics data — aggregated, anonymous visit data (see Section 5).

3. What we do NOT collect

We do not store passwords (we use passwordless authentication).
We do not persistently store IP addresses. IPs are used in real-time for rate-limiting and discarded.
We do not sell, rent, or trade your data to anyone.
We do not use your data to train AI models.

4. Cookies

We keep cookies to a minimum and group them honestly:

Essential cookies — a session cookie set after you log in, used to keep you signed in. This is necessary for the Service to work and is always active.
Analytics cookies — set only by Google Analytics, and only if you accept them via our cookie banner. They help us understand how visitors use the Service. If you decline, these cookies are never set.

When you first visit, a cookie banner lets you accept or decline analytics cookies. You can change your mind at any time by clearing the choice in your browser. We do not currently use advertising cookies (see Section 5a).

5. Analytics

We use two analytics tools, with very different privacy profiles:

Privacy-friendly analytics (always on) — a cookieless tool that collects aggregate visit data (pages viewed, country, device type) without personal identifiers and without setting cookies. Because it sets no cookies and cannot identify you, it runs for all visitors.
Google Analytics (consent-based only) — provides more detailed usage insight. It sets cookies and is operated by Google. We load it only if you accept analytics cookies via our cookie banner. If you decline, Google Analytics never loads and sets no cookies. Google's handling of any data it receives is governed by Google's own privacy policy.

5a. Advertising

NameNesting is free to use. We may display advertising in the future to support the Service. If and when we do, any advertising cookies will also be gated behind your consent via the cookie banner, and we will update this policy before such cookies are used. We currently show no ads and set no advertising cookies.

6. Third-party services

We use a small number of standard service providers to operate the Service:

Content delivery and security provider — handles traffic routing and DDoS protection. They see the network address of every request as an intermediary but do not have access to your account data.
Email delivery provider — delivers login and notification emails to you. They process your email address only to deliver the email.
Payment processor — when premium subscriptions launch, we will use an established payment processor. Their privacy policy will apply to payment data; we will update this page accordingly.

AI processing providers — some AI-generated insights (such as name meanings and on-demand explanations) are processed using third-party AI APIs. We send only the name or text needed to generate the result; we do not send your email, account details, or any personal identifiers. These providers process the request to return a result and do not receive information that identifies you.

7. How we use your data

To run the Service — authentication, saving favorites, generating AI insights.
To improve the Service — anonymous analytics reveal which features are useful and which are not.
To communicate with you — login emails, occasional product updates if you joined the waitlist or are a premium user. We will not spam you.

We will never share, sell, or trade your data with third parties for marketing purposes.

8. Data retention

Account data (email, favorites) — kept while your account is active. Deleted within 30 days of you requesting deletion.
Waitlist signups — kept until launch communications are complete. Deleted on request anytime.
Analytics data — kept for up to 12 months in aggregate form.
Backups — operational backups are kept for a limited period and then deleted.

9. Your rights

Regardless of where you live, you have the following rights at NameNesting:

Access — request a copy of the data we hold about you.
Correction — ask us to fix incorrect data.
Deletion — request deletion of your account and all associated data.
Portability — export your saved favorites at any time (free, built into the Service).
Objection — object to specific processing.
Withdraw consent — for anything you previously consented to.

If you are in the European Economic Area, UK, or any jurisdiction with similar privacy laws (GDPR, UK GDPR, CCPA, etc.), the above rights are legally guaranteed. To exercise any of them, email [email protected]. We aim to respond within 30 days, as required by GDPR.

10. International data transfers

NameNesting's servers and service providers are located in various jurisdictions, including the European Economic Area and the United States. By using the Service, you understand that your data may be processed in countries outside your home jurisdiction. Where required, we rely on standard contractual safeguards.

11. Children

NameNesting is intended for adults choosing names for their children. You must be at least 13 years old to use the Service. If you are between 13 and 18, please review this policy and our Terms of Service with a parent or guardian. If we learn we have inadvertently collected data from anyone under 13, we will delete it immediately.

12. Security

We protect your data using industry-standard encryption in transit, secure authentication, regular backups, and reasonable access controls. No online service can be 100% secure, but we follow accepted best practices and never request data we don't need.

13. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date at the top and, for significant changes, notify registered users by email. Continued use of the Service after changes means you accept the updated policy.

14. Contact

Privacy questions, data requests, or anything else: [email protected]. We aim to respond within a few days.