Privacy policy

This policy describes the personal-data processing carried out by the sleepy.domains service, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.

Data controller

ma2t, EURL with a share capital of €700.00, SIREN 505 275 883 (Lille Métropole Trade and Companies Register), 229 rue de Solférino, 59000 Lille, France. Phone: +33 (0)3 68 33 51 00. Email: contact@sleepy.domains.

Processing activities

Processing and purpose	Legal basis	Retention period
Handling offers, negotiations and domain-name assignments (identity, contact details, message content, contracts)	Performance of the contract or pre-contractual measures (art. 6(1)(b) GDPR)	Duration of the negotiation and of the contractual relationship, then archiving per the periods below
Invoicing and accounting	Legal obligation (art. 6(1)(c) GDPR; art. L.123-22 of the French Commercial Code)	10 years from the close of the financial year
Evidentiary retention of negotiation threads	Legitimate interest (art. 6(1)(f) GDPR): ma2t’s defence in the event of a dispute or of proceedings relating to a domain name	5 years, matching the general limitation period (art. 2224 of the French Civil Code)
Abuse prevention and anti-spam (IP address, timestamps, rate limiting)	Legitimate interest: security and integrity of the service	No longer than strictly necessary to detect and block abuse
Verification of intra-community VAT numbers against the VIES system	Tax obligation: substantiating the VAT treatment applied to the transaction	10 years, together with the invoicing records

Recipients

Stripe (secure payment): transfers outside the European Union are governed by the European Commission’s standard contractual clauses and, where applicable, by the EU / US Data Privacy Framework.
AFNIC (the .fr registry): upon an assignment, the new holder’s data is transmitted to AFNIC to record the transmission. It appears in the registry database and in its public directory (whois/RDAP); natural persons benefit from restricted publication of their data in that directory.
VIES (European Commission): queried when verifying intra-community VAT numbers.
Email delivery provider: delivery of notifications and confirmations.
VIRTUA SYSTEMS SAS (49 rue de Ponthieu, 75008 Paris): hosting of the service.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to object (in particular to processing based on legitimate interest), to data portability, and to set directives on what happens to your data after your death. To exercise these rights, write to contact@sleepy.domains.

You may also lodge a complaint with the CNIL, the French supervisory authority (cnil.fr).

Cookies

The service sets two cookies, sd_buyer and sd_admin: session cookies strictly necessary for authentication and for the operation of the buyer area and the admin area. They are exempt from consent (art. 82 of the French Data Protection Act). No advertising cookie or third-party analytics tracker is set.

Last updated: 12 July 2026.

This English version is provided for information; the French version prevails.