Privacy policy
Last updated:
Niftybit (PTY) LTD operates name.my-sa.biz and is responsible for the personal information it processes through the service. For privacy enquiries or requests, email zaid26@gmail.com.
1. Naming requests
When you select Generate, your browser sends your chosen industry, style, keywords, excluded words and other naming options to our server. We use these to produce suggestions. We also record the validated naming brief, generated names and result count in our database, together with request information described below, to understand service usage and investigate problems.
Providing keywords is optional. Please use general business ideas rather than personal, sensitive or confidential information. If you choose not to submit a request, the server cannot generate a batch for you.
2. Saved names and your browser cookie
We record when names are added to or removed from a shortlist, including the name, time and hashed visitor identifier. Where we can verify the originating generation request, we link the event to that request to report how many of its suggestions remain favourited. These usage records remain separate from your current shortlist.
When you save a name, we store the name, explanation and associated details in our database. The shortlist is linked to a random visitor identifier held in the name_za_visitor cookie in your browser. Our database holds a hash of that identifier. This allows the same browser to retrieve its shortlist without an email address or password; it is not an account that you can sign into on another device.
The cookie lasts up to one year from when it is set, unless you or your browser remove it earlier. It is sent only to this site and is marked HttpOnly and SameSite=Lax; on the configured public HTTPS site it is also marked Secure. The identifier can link visits and naming requests, so it should not be treated as anonymous. Anyone using the same browser may be able to access the shortlist.
You can remove individual saved names using their heart buttons or Remove in the Favourites list. This removes them from the current server shortlist, but does not remove separate generation logs, favourite events or any backup copies. Clearing or blocking the cookie can prevent access to your shortlist; it does not delete the server records. Contact us if you want to request their deletion, preferably before clearing the site's data. If the identifier is lost, we may be unable to locate or verify which records belong to you.
If you used an earlier version that saved names in browser local storage, the generator attempts to transfer that existing shortlist to the server when you return and removes the old local copy after a successful transfer. Export creates a file on your device; copying a name writes it to your clipboard only when you request it.
3. Connection and security information
Our application records request times, request identifiers, the requested path (without its query string), HTTP method, response status, processing time, browser user-agent information and error codes. Generator and API requests can also be linked to the hashed visitor identifier. Successful naming requests include the brief and results described in section 1.
Delivering the site also involves network addresses and browser-supplied headers. The application's database request log does not have an IP-address field. The generator uses connection addresses for temporary request counts to limit abusive traffic; these use one-minute windows and are cleared on subsequent generation requests after expiry, or when the server restarts. Those temporary counts are separate from the stored request logs.
Hosting, proxy and security infrastructure may separately process connection information and retain access or error logs to operate and protect the site. Infrastructure log retention and processing locations depend on the hosting arrangement; contact us for current details.
4. Cookies, analytics and advertising
Administrator access uses a separate name_za_admin cookie. It is HttpOnly and SameSite=Strict, and Secure on the configured public HTTPS site. Admin sessions expire after eight hours by default, or sooner when signed out or revoked. We store administrator usernames, password hashes and session records in our database. To limit repeated sign-in attempts, we also keep short-lived counters keyed by a hash of the directly connected network address; the counters expire after 15 minutes and are cleared during subsequent sign-in attempts. Passwords and session cookies are not recorded in request logs.
The Share button offers links to social platforms, your device's sharing options where available, and a copy-link action. It shares the public page link and title, not your naming brief or shortlist. Social platforms receive information when you choose to open them and apply their own privacy policies. We do not load their sharing widgets or tracking scripts on this site.
We use the visitor cookie described above for shortlist access and to associate requests with the same browser. We use our own request records for service usage reporting. The application does not include advertising trackers, third-party analytics scripts or third-party embeds. Hosting or security services may have their own operational storage requirements. If we introduce additional tracking or uses that require notice or consent, we will update this policy and obtain consent where required.
5. Purposes, service providers and retention
We process information to generate names, maintain your shortlist, understand usage, investigate errors, protect the service, respond to enquiries and meet applicable legal obligations. Where personal information is involved, processing must have a lawful basis under applicable law, including providing a service you request or our legitimate interest in operating and protecting it. We do not use naming briefs to build advertising profiles or sell them.
Providers supporting hosting, security or email may process information as needed to provide those services. Information may also need to be disclosed when required by law or to establish, exercise or defend legal rights. A naming brief is not sent to the third-party dictionary publishers whose source material is used by the engine.
Saved names remain until you remove them or we delete the records. Request logs and favourite events currently have no automatic expiry; they remain until removed by the operator. Cookie expiry does not trigger deletion of database records. We review retention against the purpose of the records and applicable legal requirements, and you can contact us to request deletion where appropriate. Any retained backups and hosting logs may follow separate retention arrangements.
If you email us, we receive your email address, message and any attachments you choose to send. We retain correspondence for as long as reasonably needed to handle the enquiry, keep relevant business records or meet applicable legal requirements.
Hosting or email services may involve processing outside South Africa. Where personal information is transferred across borders, the transfer must meet applicable legal requirements, including the safeguards required by POPIA. Contact us for information about the providers and locations relevant to your enquiry.
6. Your choices and rights
Subject to the Protection of Personal Information Act (POPIA) and other applicable law, you may request access to personal information we hold about you, correction or deletion where appropriate, or object to processing on applicable grounds. Where processing relies on consent, you may withdraw that consent without affecting processing that was lawful before withdrawal. We may need proportionate identity verification to protect your information when responding.
Email zaid26@gmail.com with your request. Please do not send identity documents, your visitor cookie or sensitive information by email. We will explain an appropriate way to identify relevant records if needed. You can manage individual saved names as described in section 2.
You may also complain to South Africa's Information Regulator, including at POPIAComplaints@inforegulator.org.za. You do not have to resolve a complaint with us before contacting the Regulator.
7. Security, external sites and updates
We use reasonable safeguards appropriate to the information and service. No internet service or browser storage can be guaranteed completely secure. Links to CIPC, source publishers or other external websites lead to services with their own privacy practices.
We may update this policy when the service or its processing changes. The date at the top identifies the latest version. We will give additional notice of material changes where required.
8. Contact
Niftybit (PTY) LTD
Website: name.my-sa.biz
Privacy and general enquiries: zaid26@gmail.com