Privacy

Who we are

Operator name and contact details are published here before launch.

We are the controller for the data below under the EU General Data Protection Regulation (GDPR).

What we store

• Each address check: the address you typed, the area you picked, the county and city it is in, how many properties and cases matched, and the time. We use this to see what people look for and which cities to add next.
• Signups: your email address and what you asked for (alerts for an address, a city, or API access), plus any note you add. We use it only to email you about that request.
• Your session: while you use the site, its session store holds your IP address and browser type, to keep the forms secure. It is deleted after the session expires, about two hours after your last visit.

Searches and signups are stored without your IP address. There are no accounts and no payments.

The property data itself

Code cases come from public records the City of Orlando, Miami-Dade County and the City of Tampa publish. We do not store names or contact details from those records: we leave out the fields that can hold them (including the free-text case notes, which sometimes carry a complainant's phone number or email, and the name of whoever filed a complaint), and we drop every case the county marks confidential.

Legal basis

Address checks: our legitimate interest in running the check and learning where demand is (GDPR Art. 6(1)(f)). Signups: your request, so we can answer it (Art. 6(1)(b)).

Who else receives data

• US Census Bureau geocoder: when your search includes a city or ZIP code, the address you typed is sent to it to find the county and city it is in.
• Esri ArcGIS Online, which hosts the Miami-Dade County, City of Orlando and Hillsborough County boundary maps: the map coordinates of that address, not the address text.
• Hetzner (servers, Germany), Cloudflare (network and security, sees IP addresses in transit), Backblaze B2 and Cloudflare R2 (encrypted database backups), and Cloudflare Email Service (sending email).

Some of these are in the United States. We do not sell data or use advertising networks. Visitor statistics run on our own server and set no cookies.

How long we keep it

Address checks are deleted after 12 months and signups after 24 months, automatically. Encrypted backups keep a copy for up to 30 days after that. You can ask us to delete a signup sooner at any time.

Cookies

Only the two the site needs to work: a session cookie and a security token for the forms. No tracking or advertising cookies, so there is no cookie banner.

Your rights

You can ask to see, correct or delete your data, or object to how we use it, by emailing [email protected]. We answer within 30 days. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.