Privacy
Last updated: [DATE]
Draft — needs legal review
This describes what the system genuinely does today. It still needs review against India’s Digital Personal Data Protection Act before launch.
What we collect
When you sign in: your phone number, email address and name, from Firebase Authentication. We never see or store your password — Google handles that.
When you list something: the text and photos you provide, the location you pin, and the contact details you choose to publish.
When you use the site: your approximate location if you grant permission, what you searched for, and which contact details you revealed. We store a one-way hash of your IP address alongside a contact reveal, never the address itself.
Your location is deliberately blurred
The exact coordinates you pin are stored, but they are never sent to anyone else. Search results and listing pages show a point shifted by roughly 300 metres, plus the neighbourhood name. The shift is fixed per listing rather than random, so it cannot be averaged out across repeated requests to recover the real spot. You share your actual address yourself, in conversation, once you have decided to deal with someone.
Contact details
Your phone number and email are shown only to signed-in users who explicitly tap Contact on your listing, and only the channels you chose to publish. Every disclosure is recorded with who, when, and which channel. That record is what powers the daily limit on reveals, and it is what we investigate against if someone reports harvesting. It also means we can tell you who has seen your number.
Why we require an account to see contact details
Without it, every phone number on the site could be collected in bulk by a script on day one. Requiring sign-in costs us some conversion and is worth it.
Who else gets your data
Firebase Authentication (Google) for sign-in and OTP delivery; Neon for the database; Amazon Web Services for hosting and image storage; Resend for email; and CARTO and OpenStreetMap for map tiles. If advertising is switched on, Google AdSense sets its own cookies — the site does not pass it your personal details. We do not sell your data to anyone, and we never share contact details with advertisers.
Analytics
We measure how the site is used with our own logging, not a third-party analytics service. Nothing is sent to Google Analytics, Meta, or any similar tool, and no analytics request leaves for a domain you did not visit.
What we record is the action and its context — that a search happened, what was typed, how many results came back, that a listing was opened, that contact details were revealed. Alongside it we store a random identifier that lives in your browser tab and is discarded when you close it, which is enough to see that one visit went from a search to a contact and not enough to recognise you on your next visit. We deliberately do not record IP addresses, browser fingerprints, or your exact coordinates in this log — a search is attributed to a neighbourhood, never a position.
The most useful thing this produces is a list of searches that found nothing, which tells us what to go and find. If advertising is switched on later, Google AdSense will set its own cookies and we will say so here before it happens.
How long we keep it
Listings and their contact details, until you delete them. Contact reveal records, 12 months, because abuse is usually reported well after it happens. Your account, until you ask us to delete it — after which listings are removed and reveal records are stripped of anything identifying.
Your rights
You can ask for a copy of what we hold, correct it, or have it deleted; withdraw consent for location or alerts at any time; and unsubscribe from any alert email in one click. Write to [PRIVACY EMAIL] and we will respond within 30 days. If you are unhappy with the outcome, you may complain to the Data Protection Board of India.
Cookies
We use what is needed to keep you signed in and remember your preferences. Analytics and advertising cookies, if enabled, are described here before they are switched on.
Contact
[ENTITY NAME], [REGISTERED ADDRESS]. Privacy queries: [PRIVACY EMAIL]. Grievance Officer details are on the terms page.