Privacy Policy

• Your email address.
• Your alert criteria — maximum rent, number of bedrooms, bathroom preference, and any commute destinations you set. If you set areas of interest before that feature was retired in July 2026, the list you entered is still stored with your account until you delete your account or ask us to remove it.
• Delivery channel preferences (a Discord webhook URL, if you choose to add one).
• Your account password — stored as a one-way hash. We never see or store your password in plain text.
• A record of alerts sent to you (property, timestamp, delivery status).

Solely to deliver property alerts and manage your account. We don't use your data for advertising, profiling, or any purpose other than running the service you signed up for.

We rely on a small number of third-party services to operate:

• Email provider — to send alert emails to you. Your email address is passed to our SMTP provider for delivery.
• Google Maps Routes API — to calculate commute times for listings. Your commute destination is sent to Google as part of each lookup.
• Stripe — to process pass payments. Your card details go directly to Stripe and never touch our servers. We store a reference to your Stripe customer record and what you bought.

We do not sell your data. We do not share it with advertisers, data brokers, or analytics platforms.

We keep your data for as long as your account is active. If you delete your account, we delete your personal data promptly — including your email, criteria, channel preferences, and alert history.

Guest subscribers (no account) can remove their data by using the unsubscribe link in any alert email, or by emailing us.

Payment records are the one exception. If you have bought a pass, we keep a record of the purchase — what was bought, when, the amount, and its Stripe reference — for up to six years, as UK financial record-keeping requires. When you delete your account these records are kept but unlinked from you: your name and email are removed from them. They never include card details.

Under UK GDPR you have the right to:

• Access — request a copy of the data we hold about you.
• Correction — ask us to fix inaccurate data.
• Deletion — ask us to delete your data.
• Portability — receive your data in a portable format.
• Objection — object to how we use your data.

To exercise any of these rights, email [email protected] or use the unsubscribe link in any alert email. We'll respond within 30 days.

We use a single session cookie to keep you signed in (provided by NextAuth). It contains only an encrypted session token — no personal data.

We don't use marketing cookies, tracking pixels, or third-party analytics. No cookie banners needed.

Questions about this policy? Email [email protected]. You also have the right to lodge a complaint with the ICO (UK data protection regulator) if you're unhappy with how we handle your data.