Privacy Policy

1. Who we are (controller)

flatradar (“we”), operated by its owner, is the controller of your personal data. The operating legal entity is being finalised; until then, contact us at info@flatradar.online.

2. What data we collect

We collect only what the service needs to work:

• Account email — when you create an account (login is by a one-time link emailed to you, with no password).
• Login sessions — an identifier that keeps you signed in, and a per-day counter of how many reports you have generated (for the daily limit).
• Subscriber email and, optionally, your Telegram chat id — when you sign up for alerts.
• Content you submit in the app — a listing link you ask us to analyse, or a typed or spoken search — used only to produce your result.
• IP address — briefly, for rate-limiting and abuse prevention.
• Functional cookies — sid, lang, pro, acct (see the cookies section).

3. Why we process it and the legal basis

• To send the alerts and login links you request and to run your account and reports — on your consent / at your request (GDPR Art. 6(1)(a) and (b)). Alerts use double opt-in.
• To keep the service secure and prevent abuse (rate-limits and anti-spam counters keyed to IP) — our legitimate interest (GDPR Art. 6(1)(f)).

4. Who we share it with (processors)

We do not sell your personal data and do not use it for advertising. The following providers process data on our behalf:

• Supabase — database hosting (stores your email, Telegram id, counters).
• Railway — application hosting (processes requests, including IP).
• Google (Gemini) — AI analysis that answers your in-app questions and analyses a listing you open (EU/US Data Privacy Framework, DPF).
• Hostinger — email delivery (login links, alerts).
• Telegram — if you choose Telegram alerts, delivers messages to your chat (an independent service).

5. How long we keep it

We keep data no longer than necessary:

• Account and session data — while your account is active; deleted when you delete your account or a session expires.
• Subscriber records — until you unsubscribe, then erased.
• IP anti-abuse counters — short-lived, cleared within a few weeks.

6. Your rights

You have the right to access, rectify, erase, and restrict processing of your data, to data portability, to object, and to withdraw consent at any time (GDPR Arts. 15–21). To exercise them:

• Email us at info@flatradar.online.
• Or delete your account yourself at /account — this permanently erases your account, sessions, and usage counters.
• The unsubscribe link in any alert email erases your subscriber record.

7. Cookies

We use only functional first-party cookies — sid (session), lang (language), pro (access), and acct (login). There are no analytics, advertising, or third-party tracking cookies. Because they are strictly necessary for the service, no consent banner is required. If that changes (for example, if we add analytics), we will ask for your consent.

8. Complaints to a supervisory authority

If you believe we handle your data incorrectly, you can complain to Latvia’s Data State Inspectorate (Datu valsts inspekcija, DVI), www.dvi.gov.lv. We would appreciate the chance to help first, so please contact us too.

9. Changes and contact

We may update this policy; the date above shows the last change. Questions about privacy: info@flatradar.online.