Privacy policy

What we collect

Visitors without an account: no personal data. Your language and currency are kept in your browser; technical logs (address, browser, errors) are kept a few days for security.

With an account: your email address, your preferences (language, currency, alert emails), your favourites, saved searches and alerts.

Messages you send us (contact, reports, waiting list): their content, your email if you give it, and a salted hash of your IP address used only to limit floods.

Listings and their authors

Listings come from public posts. We never store the authors' names; their Facebook identifier is kept only as an irreversible hash to spot reposts, and contact details are removed from the texts.

Expired listings lose their photos after 30 days and their texts after six months. An author can ask for the removal of a listing at any time.

Why we use it

To run your account and send your sign-in links and alerts; to answer your messages; to keep the service secure and working. We do not sell your data, show advertising or build profiles.

Who processes it

Supabase (database, accounts, files) and Vercel (website), in Singapore; Resend for emails; Sentry for error reports. They act on our instructions only.

How long we keep it

Account data: until you delete your account. Read alerts: 90 days; unread alerts: 180 days. Messages to us: one year. Waiting list: until direct publishing opens, then until you leave it.

Cookies

Only what the service needs: the sign-in session and your language. No advertising or tracking cookies.

Your rights

You can see, download and delete your data in Settings. For anything else (correction, objection, a question about a listing about you), write to us through the contact form. You can also complain to your data protection authority, such as the PDPC in Thailand.