Privacy Policy

What is collected

Only the listing you choose to check, and only when you submit it:

• Listing title, description, rent, bedrooms, bathrooms, and address
• Contact details that appear in the listing (the landlord's email or phone number)
• Photos you upload on the website
• The website name of a listing link (for example, craigslist.org), never the full link

Your IP address is used briefly in memory to limit how many checks one visitor can run per minute. It is not stored.

The Chrome extension

• It reads a page only when you click "Read this listing," and only the tab you are viewing.
• It shows you what it found, and nothing is sent until you click "Analyze listing."
• It does not read your browsing history, other tabs, or any page you don't ask it to check.
• It sends data only to this service's analysis server.

How it is stored

• Emails and phone numbers are removed from the stored text and kept only as one-way keyed hashes. These can show that the same number appeared on another listing, but the number itself cannot be read back.
• Photos are never stored. Each photo is reduced to a short fingerprint used to spot copied photos, and the image is discarded.
• Listings and results are deleted automatically after 180 days.
• Data is stored in the United States and encrypted in transit.

Service providers

• Google Cloud (runs the analysis server) and Vercel (hosts this website)
• Supabase (stores results, as described above)
• The U.S. Census Bureau geocoder receives a submitted street address to confirm it exists. Nothing else is sent to it.

Results are not verdicts

Each result is an automated risk assessment based on common scam patterns. It is not a finding that any landlord or listing is fraudulent.

Questions or deletion requests

Open an issue on the project's GitHub page. Changes to this policy will be posted here with a new effective date.