Webba← Back to the gallery

Privacy Policy

Version 1.5Effective November 7, 2026

This Privacy Policy explains what information Webba collects when you use the marketplace at webba.com, why, and who processes it. It describes Webba’s actual data practices — it does not claim collection or certifications that Webba does not have.

1. Information we collect

Information you provide

  • Contact and inquiry information. When you ask a question, make an offer, or start a purchase, we collect the email address you supply, and any name and free-text message, note, or offer amount you enter. Buyers do not create a password or an account; your email address is your identity for a conversation or a purchase. When you open your conversation, we record the time, so we can see when a reply has been read.
  • Transaction information. If you proceed toward a sale, we record the domain, the agreed price and currency, and the buyer email associated with the transaction.
  • Logo lab downloads. To download from the logo lab, you give an email address (paid downloads confirm it with a code we send to it) and tick a box to agree to the Terms of Service. We keep a record of that agreement with your email, the versions you agreed to, the time, your IP address and browser type. We keep that address with the business names of the logos you download, and whether each was free or paid, so we can honour what you are entitled to and let you download your logos again. With each download we also keep the IP address it came from and a random identifier held in your browser, only to stop one person taking many free logos. The code itself is stored only as a one-way hash, and expires after fifteen minutes.
  • Operator account credentials. For accounts that manage listings, we store an email address and a password stored only as an Argon2id hash — we never store your password in a readable form.

Information collected automatically

  • Session and access data. To keep you signed in or to grant access to a conversation or purchase, we set functional cookies holding an opaque or signed token (see our Cookie Notice). Server-side sessions store only a hashed token and an expiry, not your IP or device.
  • IP address, for security, abuse prevention and inquiries. We record IP addresses as part of rate-limiting and abuse controls (for example, to limit how often a new conversation can be started from one address). When you send an inquiry, a price request or an offer, we keep the IP address it came from with that conversation and with the individual message or offer, for abuse investigation, and use it to estimate an approximate location (such as city and country) that may be shown to the seller of the name. The seller is shown that approximate location, never the IP address itself. When you accept our terms while making an offer or starting a purchase, we may record the IP address and browser user agent with that acceptance. We do not use IP addresses to build advertising profiles.
  • First-party usage measurement. We count page views on our servers using a keyed, one-way code derived from the IP address and browser type that changes daily, without storing the IP address with the view; we record the host name of the referring site, a few on-page actions (such as following a WhatsApp, phone or email link, or opening Buy Now) and searches, the latter against a random per-visit identifier held in your browser. A first-party cookie (webba_src) remembers the campaign tags or referring site of your first visit and is read if you later make an inquiry, offer or purchase request. See our Cookie Notice. We also use Microsoft Clarity on our public pages to see how they are used (see section 3). We use no advertising or cross-site tracking services.
  • Email delivery and abuse records. If transactional email is enabled, we keep a record of which notification kinds were sent to which address and when, to prevent duplicate and abusive sending.

Webba Logo Lab in ChatGPT and Claude

When you use Webba Logo Lab inside ChatGPT or Claude, this is what applies.

  • What we receive. The business name, description and tagline you give it, the colours and changes you ask for, a pseudonymous identifier from ChatGPT (Claude sends none), and your IP address when you open a download link. It does not ask for your name, email address or conversation history, and we do not receive your other conversations.
  • Why. To draw your logo and make your files, to apply download limits, to prevent abuse, and to count how much the app is used.
  • Usage counts. We count tool uses, downloads and errors per day against a scrambled form of the identifier from ChatGPT, or of your IP address for Claude downloads. These counts contain no business names, prompts or personal details, and no readable IP addresses.
  • Your agreement. Before you download, a Webba page asks you to tick a box to agree to the Terms of Service. We keep a record of that with a scrambled form of the identifier from ChatGPT, or of your IP address for Claude, the versions you agreed to and the time, so we can show you agreed. It holds no email and no readable IP address.
  • Who receives it. OpenAI operates ChatGPT and Anthropic operates Claude, each under its own terms and privacy policy. Webba’s hosting provider stores our servers and backups. We do not sell this information or use it for advertising.
  • How long we keep it. Download allowance records are kept for about a day, stored files for up to 48 hours, and usage counts for 90 days. Server access logs, which hold IP addresses and download links that carry your business name and design in encoded form, are kept for up to 14 days. Rate limits that use your IP address are held in memory only. Backups may hold allowance records and usage counts for longer, until the backup is deleted.
  • Your choices. The app needs no account, and you can stop using it or disconnect it in ChatGPT or Claude at any time. Contact us using the details below with any question or request. Because usage counts are pseudonymous, we may not be able to link them to you.

2. How we use information

  • to operate the marketplace and show and manage listings;
  • to let buyers and sellers communicate, negotiate offers, and begin and coordinate a purchase;
  • to set up and reconcile a transaction with the escrow provider, or to point a buyer to a GoDaddy checkout link, when a sale proceeds;
  • to send transactional messages (such as offer and purchase updates) where email delivery is enabled;
  • to secure the service, prevent fraud and abuse, and enforce our Terms; and
  • to understand aggregate, non-identifying usage of the product.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Service providers and sub-processors

We share the minimum information necessary with providers that help us run the service. They process it on our behalf or, in the case of escrow, as an independent provider of their own service:

  • Escrow.com — when a sale proceeds to escrow, the buyer and seller information needed to run the transaction (such as email and the agreed amount) is processed by Escrow.com under its own terms and privacy policy. Webba does not handle payment card or bank details.
  • GoDaddy: when a sale goes through a GoDaddy checkout link, the buyer gives payment and account details directly to GoDaddy, which processes them under its own terms and privacy policy. Webba shares only what is needed to point the sale to the right domain.
  • Resend — our transactional email provider. When email delivery is enabled, the recipient address and message content are processed to deliver notifications. (Email delivery may be disabled, in which case notifications are queued but not sent.)
  • OpenAI — used to generate brand concepts and search features from domain-name and listing metadata. This processing concerns listing/inventory data, not buyer contact information.
  • Microsoft Clarity: on our public pages (not account, seller or admin pages), Clarity records how a page is used, such as clicks, scrolling, the pages viewed and a replay of the visit, so we can see what works and fix what does not. What you type into forms is masked and not recorded, and the offer and conversation box, the support chat, the name checker and the Logo Lab studio are hidden from it entirely, so offers, messages and the names you try never reach it. It is not used on your conversation or purchase pages. Outside the EEA, UK and Switzerland it sets its own cookies to link the pages of a visit; for visitors from those regions it records without cookies. Microsoft processes this data under the Microsoft Privacy Statement.
  • Hosting and DNS infrastructure. The service and its authoritative DNS run on infrastructure we operate; personal data is stored in our own database on that infrastructure.

We may also disclose information where required by law or to protect the rights, safety, or property of Webba, our users, or the public.

4. International processing

Some of our providers (including Escrow.com, GoDaddy, Resend, OpenAI and Microsoft) are based in the United States, so using Webba may involve processing your information in the United States or other countries.

5. Retention

We keep information for as long as needed to provide the service and for legitimate business, legal, and security purposes — for example, conversation and transaction records are retained to support an ongoing or completed sale and to resolve disputes, and abuse and audit records are retained to protect the platform.

6. Security

We take reasonable measures to protect information: passwords are stored only as Argon2id hashes, session and access tokens are stored only as hashes, access cookies are HTTP-only, and administrative access is restricted. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. We do not claim any specific security certification.

7. Your choices and rights

You may contact us to access, correct, or delete personal information we hold about you, subject to records we must keep for legal, security, or transaction-integrity reasons. Because buyers are identified by email, you can ask us to remove a conversation or inquiry tied to your address. Depending on where you live, you may have additional rights under applicable data-protection law.

8. Children

Webba is not directed to children and is intended for users aged 18 and over. We do not knowingly collect information from children.

9. Changes and contact

We may update this policy; the current version and effective date are shown at the top. For privacy questions or requests, contact hello@webba.com (operator: Eric Freedman, 834 8th Ave, Prospect Park, PA 19076, United States).