Privacy

Without an account

You can browse, add a house, vote and upload photos without giving us your name or email. Your browser gets an anonymous session after a bot check, so we can limit how often one device adds or votes.

• Houses you add (address and map pin) are public once added. Photos are public only after an admin approves them.
• To stop vote flooding, we may keep a salted hash of part of your network address for one day. We never store your IP address itself, and the daily salt is destroyed, so old hashes can’t be linked back.

When you subscribe or create an account

• Your email address, which only our sign-in system and outgoing emails use. It is never shown on the map or to admins in full.
• What you asked for: new houses, new events, or both, and daily or weekly.
• Which houses you manage, and any request you send to manage or remove a house, with your note.
• A record of which digests were sent to your account, so we can avoid sending you the same digest twice.
• A copy of a digest email while it is being sent, so a retry after a network error sends exactly the same email instead of a second, different one.
• If you start from a device that already added a house, a one-way hash of your email (not the address itself), usable for one hour, so that device’s houses can move to your account once you confirm the email.

We email only what you asked for. Every digest has a link to change or stop it, and email apps like Gmail show a one-tap Unsubscribe.

Who processes it

• Supabase hosts the database and the sign-in system.
• Resend sends our emails (sign-in codes and digests).
• Cloudflare hosts the site and runs the Turnstile bot check.
• Google Maps draws the map and looks up addresses when you add a house.

We don’t sell or share your email, and there are no ads or tracking pixels in our emails.

How long we keep it

• Your email and choices: while your account or subscription exists. If you stop emails, we keep your choices so you can start again.
• The email hash for linking a device’s houses: deleted within a day.
• The copy of a digest email being sent: deleted as soon as it is sent or fails, and if a send is never resolved, within 2 days at most (the send is then closed as failed and a later run starts a new one).
• Records of which digests were sent: 60 days.
• Requests to manage or remove a house: while they are open, then 180 days after they are decided.

When you delete your account, we delete your sign-in, email, subscription, requests and digest records right away, in one step. Houses you managed stay on the map with no manager.

Delete your data

Sign in on My account with your email and choose Delete my account. Replying to one of our emails doesn’t delete anything; the account page does it right away.