NAMES ON EARTH Privacy Notice

1. Who is responsible

Jelantec, based at Lima / PERU, operates NamesOnEarth.com and is responsible for personal information processed through this service. Contact contact@support.namesonearth.com about privacy, corrections or removal. This notice explains our practices; it is not a request to waive your rights.

2. What we collect and what becomes public

When you submit an entry, we receive the display name, optional country, contact email, order details, consent records and payment status. Published display names, countries, entry numbers and publication timestamps are public. They can appear on our map, searchable wall, entry pages, public links and generated cards or videos. Countries are user-selected, not proof of nationality or residence. Names are not verified identities, and repeated names may belong to different entries.

Public information can be indexed by search engines, copied or shared worldwide by other people. Do not submit a name or country you do not want made public. We do not publish your contact email, private management links or payment receipt.

PayPal processes payments. We store transaction identifiers, amounts, currency, status, available fee/refund details and related order records. We do not receive or store your complete payment-card number or card security code through our checkout.

We also process support messages, correction requests, reports, moderation and administrator audit records, and technical information needed to operate and protect the service. This can include IP addresses handled by our hosting infrastructure and hashed address-based rate-limit identifiers. Hashing is a security measure, not a guarantee that data is anonymous.

3. Why we use information

We use information to check proposed names, process orders, publish and manage entries, generate requested sharing assets, send receipts and private management links, answer requests, prevent fraud and abuse, resolve disputes and meet legal obligations. Publishing an entry does not subscribe you to marketing emails.

Where a legal basis is required, we rely on performing the purchase/service contract for checkout and service delivery; consent where required for optional public disclosures or nonessential technologies; legitimate interests, where permitted and balanced against your rights, for proportionate security, support and abuse prevention; and legal obligations for required records. You may withdraw consent where processing relies on it without affecting earlier lawful processing. Public removal and legally required record retention are separate processes.

4. AI moderation

We send the proposed name to Groq, our configured AI moderation provider, to check for prohibited content. We do not intentionally include your email or payment details in that moderation request. Names can themselves identify people. Automated checks may reject legitimate names or fail to identify offensive content. If your name is rejected or uncertain, contact support for human consideration before paying. Approval does not verify your identity or authorize unlawful content.

5. Service providers and disclosure

We use DigitalOcean for hosting and server storage, PayPal for payments, Resend for transactional and support email, and Groq for name moderation. Authorized administrators access information needed for their duties. Administrator sign-in is handled by this application using server-configured credentials; no external administrator identity provider is used. Providers may process data in countries other than yours under their applicable contracts and privacy notices. Where legally required, we must establish an appropriate transfer mechanism and safeguards before transferring data.

We may disclose necessary information to professional advisers or authorities to comply with law, address fraud, protect rights or resolve claims. A lawful business transfer may involve relevant records subject to applicable protections and notice requirements. We do not sell personal information or use submitted names for third-party targeted advertising.

6. Cookies and measurement

We use cookies or browser storage for private checkout access, short-lived management sessions, language preferences and remembering a published entry so it can be highlighted on a return visit. Some preferences remain until expiry or until you clear them. Administrator authentication uses separate security cookies. You can clear or block browser storage, but private checkout and management features may stop working.

The application can record first-party counts of purchase and sharing actions; a share-button click is not proof that a social post was published. Optional browser analytics is disabled in the default production configuration. We will obtain any legally required consent before enabling nonessential measurement. We do not claim that security-related processing is anonymous or that all browser storage is exempt from consent requirements.

7. Retention and removal

Public entries remain available while the service operates, subject to the Terms, removal requests and moderation. Use the private management flow to hide your entry, or contact support if you cannot access it. Removal stops new public display and downloads through the service; it does not necessarily erase associated private records or copies held by third parties.

Generated download files normally expire one hour after generation and are deleted by the worker on its next cleanup pass. Delays can occur during downtime. Files may be regenerated on request while the entry remains public. A visitor's saved copy is outside our control.

We retain private orders, consent, accounting, dispute, security and support records only for the time reasonably necessary for their purposes, applicable legal retention requirements and resolving actual claims. The criteria include the applicable accounting/tax period, unresolved payment or legal disputes, the need to evidence consent and the time needed to answer support requests. Retention is not automatically limited to the lifetime of a public entry. We review records for deletion or de-identification when no longer needed. Restricted backup copies may persist until replaced under the backup schedule; if restored, applicable removal requests must be reapplied. Provider-held copies follow the relevant provider arrangements and legal obligations.

8. Your rights and security

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, withdraw consent, challenge a qualifying automated decision, and complain to your competent data-protection authority. Contact our support address. We may request proportionate verification to protect your information and will respond within the applicable legal period. Do not send passwords, complete card details or private management tokens in a public post. Requests are not refused solely because you lack an account.

We use access controls, HTTPS in production and other appropriate safeguards, but no service can promise absolute security. Removing an entry cannot guarantee removal from search-engine caches, other websites or downloaded files; we will consider reasonable assistance requests.

9. Children and updates

The service is intended for adults aged 18 or older, or the higher age of majority applicable to them. Do not submit children's personal information. Contact support if you believe it has been submitted without authorization so we can investigate and take appropriate action.

We may update this notice to reflect changes in practices or legal requirements and identify the effective date. Material changes will receive any notice or consent required by law; updates do not retrospectively authorize an incompatible new use.