Privacy policy
Last updated: 27 October 2026
What we collect
Visitors without an account: no personal data, apart from the visit statistics below and, if you accept it, the Meta pixel. Your language and currency are kept in your browser; technical logs (address, browser, errors) are kept a few days for security. Error reports sent to Sentry carry the visit's id and, once you are signed in, your account id; they are kept 90 days.
With an account: your email address, your preferences (language, currency, alert emails), your favourites, saved searches and alerts; with Pro, your plan, its renewal date and your Stripe customer number.
Once you are signed in, we keep the IP address and the browser (User-Agent) of your last visit, for the security of the account, for support and to understand how the service is used. They are erased 30 days after your last visit or with your account. When the team looks at your account, the address may be sent to ipapi.is (Germany) to find the internet provider and spot a VPN.
Messages you send us (contact, reports, waiting list): their content, your email if you give it, and a salted hash of your IP address used only to limit floods.
If you accept the Meta pixel (we ask visitors arriving from our Facebook or Instagram ads; anyone can turn it on below): on each visit from that browser, the addresses of the pages you open here, whether you create an account or an alert, Meta's cookie identifiers, and the technical details Meta reads itself (IP address, browser, language, screen size). Your email and name are not sent.
Listings and their authors
Listings come from public posts. We never store the authors' names; their Facebook identifier is kept only as an irreversible hash to spot reposts, and contact details are removed from the texts.
Expired listings lose their photos after 30 days and their texts after six months. An author can ask for the removal of a listing at any time.
Creators we write to
We write to some people who publish about life in Bangkok (videos, posts, blogs, newsletters, podcasts) to offer them our rent figures, free. We only use a professional email address they published themselves. We keep their name, public profile, audience size, language, that address and the page where it is published, the districts and lines of their kit, and the emails we sent them and whether they were delivered.
We rely on our legitimate interest in offering free data to people who publish on the subject. A creator gets a first email and at most one reminder; after that, only those who asked for the monthly kit hear from us. Each email has a link to stop them, effective at once. The emails go through Resend (United States).
The record of a creator who never answered, or whose address no longer works, is deleted a year after we stop writing, and so is a record we never used. The record of one who unsubscribed or reported our email as spam is kept, so that we never write to them again. Anyone can ask for their record to be deleted through the contact form.
Visit statistics
We count visits with Umami, an open-source tool we run ourselves on a server rented from Hostinger in France. It uses no cookies. For each page it records the page, the site you came from, your country, region and city (worked out from your IP address, which Umami does not store), your language, screen size, type of device, system and browser. Visitors are told apart by a hash that changes every month. Once you are signed in, the visit is linked to your account (its id, email, plan and sign-up date), so we can see how the service is used and help you when something goes wrong.
It also counts a few steps: opening a listing (its id), following it to its original post, saving it to your favourites (its id), changing a filter (which one, never its value), choosing a place in the search box (its kind, and whether it was suggested or found), starting an alert (from which screen) or saving it (the area it watches), contacting an advertiser (the channel), proving your address with the emailed code, a new account, opening and completing a Pro payment, and errors you run into (their message and the page). So that a new account is counted only once, your browser keeps a note of it. Only the page address and its campaign tags (utm_) are sent: filters, sign-in codes and the rest of the address are left out. On some visits, it notes where you click and how far you scroll, to see which parts of a page are used: the position and your screen size, never what you type. The address then leaves whole, but Umami keeps only the page's path. We keep these statistics for two years at most. We rely on our legitimate interest in knowing which pages and channels are useful; a content blocker stops this counting and changes nothing else on the site.
Umami also records a replay of each visit, to understand and fix the difficulties visitors run into. A replay shows what the page displays, mouse movements, clicks, scrolling and moves from one page to another. Every visit is recorded, for 30 minutes at most per page load. What you type in a field is masked in your browser before anything is sent: it is never recorded. Nothing is recorded on the creator kit pages or when a page is shown inside a frame. A recording keeps the full address of each page, including its query string. Recordings stay on the same Umami server as the statistics, and only Robin Gastout, who runs the service, watches them. They are deleted after 30 days. No cookie is used.
Replay analysis: each recorded visit is summarised automatically on our server as a text timeline (pages opened, labels of the buttons and links clicked, durations, signs of difficulty such as repeated clicks or an error). The summary never contains what you type in a field, your name or your email address; email addresses, phone numbers and long strings of digits shown on screen are masked in it. Except for a single-page visit without any click, the summary is then analysed by an artificial intelligence model, Anthropic's Claude (United States), through Vercel's AI Gateway, to spot what gets in visitors' way and improve the site. Anthropic does not use data from its API to train its models. This analysis is not used to make any decision about you. Summaries and analyses are deleted after 30 days.
Daily visit review: every morning, the previous day's visits are gathered on our server into a file without identity. It holds totals (source, country, device, browser) and, for each visit, identified only by a number: the country, device, browser, pages viewed (addresses without identifiers), duration, actions (including a sign-up or a payment, without knowing who), the summary and analysis of its replay, and a label (E1, E2…) shared by visits that look alike. It never contains an IP address, a city, an email address, a name or any account or visitor identifier. This file is analysed by an artificial intelligence model, xAI's Grok (United States), through Cursor (United States), to spot what gets in visitors' way, where the traffic comes from and fake traffic. This analysis is not used to make any decision about you. The file is deleted after 30 days and the report after one year; a copy of the report stays in the Grok app.
AI assistants (MCP and ChatGPT)
Our MCP server (bkkradar.com/api/mcp) and the actions of our ChatGPT assistant, Bangkok Condo Finder (bkkradar.com/api/v1), answer the AI assistants that search our listings. They receive the criteria the assistant sends (budget, bedrooms, station, district, a place) and the address of the computer that calls: the platform's for ChatGPT or Claude on the web, yours for an app on your computer (Claude Desktop, Cursor).
That address only serves to limit floods: it stays a few minutes at most in the server's memory and is never written to our database. The criteria are not stored either; like the address, they appear in the hosting's technical logs, as for any visit. A search around an address sends that address to Google (Places API) to place it; the address and its position are then kept in a cache, linked to no one.
Nothing else is collected: no account, no cookie, no name. What you write to the assistant is handled by its provider (OpenAI for ChatGPT, Anthropic for Claude…) under its own privacy policy. The links it shows lead to our pages with a tag (utm) that tells our visit statistics which assistant you came from.
Emails you send us
Emails sent to robin@robingastout.io are read by an artificial intelligence assistant that works for Robin Gastout. Every 30 minutes, from 8 a.m. to midnight (Bangkok time), the sender's address and name, the subject and the text of new messages are sent to xAI's Grok model (United States), through Cursor (United States). The assistant answers a simple question on its own when the answer is in BKK Radar's public information. It never grants or commits to anything: a refund, an exception, access to an account or its data, a complaint go to Robin Gastout, who answers them. It archives messages that ask for nothing. It does not keep the text of the emails: for each message it handles, only the sender's address, the subject and a one-sentence summary are kept, for 30 days, in a separate Supabase database hosted in Europe (Zurich). The emails themselves stay in the inbox (Google Workspace). This processing is based on legitimate interest: answering you faster. To object to it, say so in your email or use the form on the Help page.
Requests sent through the BKK Radar form (contact, report, listing removal) are read by the same assistant, at the same times: it receives the type of request, the message, the listing concerned and the email address left. It answers on its own, by email from robin@robingastout.io, a simple contact request whose answer is in BKK Radar's public information; a report or a listing removal always goes to Robin Gastout, and the assistant never removes a listing. For each request handled, it keeps only the email address, the type of request and a one-sentence summary, for 30 days, in the same database.
Why we use it
To run your account and send your sign-in links and alerts; to answer your messages; to keep the service secure and working; to count visits (see Visit statistics); and, only if you accept the Meta pixel, to measure our Facebook and Instagram ads and help Meta show them to people BKK Radar can help. For the pixel, your consent is the legal basis, and you can withdraw it at any time. We do not sell your data and show no advertising on the site.
Who processes it
Supabase (database, accounts, files) and Vercel (website), in Singapore; Resend for emails; Sentry, in the European Union, for error reports; Stripe for Pro payments (your email and payment details, which we never see); Hostinger, in France, for the server of our visit statistics; Anthropic, in the United States, through Vercel's AI Gateway, to analyse the summaries of recorded visits (Claude model); ipapi.is, in Germany, to find the internet provider behind an address and spot a VPN when the team looks at an account; Google (Places API) to place an address an AI assistant asks about. They act on our instructions only. Every day, xAI, in the United States, also reviews through Cursor a file of visits without identity (Grok model); a copy of its report stays in the Grok app. xAI also reads, through Cursor, the emails sent to robin@robingastout.io (Grok model); Google Workspace hosts that inbox.
If you accept the Meta pixel, Meta (Meta Platforms Ireland Ltd in Europe, Meta Platforms, Inc. elsewhere) receives the data described above, may process it in the United States, and also uses it under its own privacy policy.
How long we keep it
Account data: until you delete your account. Read alerts: 90 days; unread alerts: 180 days. Messages to us: one year. Waiting list: until direct publishing opens, then until you leave it. Visit statistics: two years at most; the email linked to your visits stays in them after you delete your account, unless you ask us to erase it sooner. Visit replays: 30 days. Visit summaries and their analyses: 30 days. Daily visit file (Grok): 30 days, and its report: one year. Summary of each email handled by our email assistant (sender's address, subject, one sentence): 30 days. Error reports: 90 days. IP address and browser of your last visit: 30 days after that visit, or until you delete your account.
Your answer about the Meta pixel: in your browser until you change it, and asked again after a year. Meta's cookies: 90 days after your last visit.
Your rights
You can see, download and delete your data in Settings. For anything else (correction, objection, a question about a listing about you), write to us through the contact form. You can also complain to your data protection authority, such as the PDPC in Thailand.