Privacy policy

1. What we collect

Account data. Your username and email address. We do not store the password itself: the database holds only its irreversible hash and a unique salt. If you sign in with Google or Apple, we receive your email address and a permanent sign-in identifier from them — no password is created in that case.

Account contents. The listings you add to favourites and your saved searches: the name of each search and its parameters — city, district, price range and the rest of the filters. It also covers the reviews you leave on listings: the text, the rating and the username the review is published under.

Technical data. When you reach our servers, the service logs may record your IP address, the requested address and the time of the request — this is how any web service works. We use those records only to diagnose failures and to protect the service from abuse, and we do not match them against your account for any other purpose.

Analytics — only with your consent. If you chose “Accept” in the cookie banner, the site loads Google Analytics, which collects anonymised visit statistics: which pages were opened, how long the visit lasted, the type of device and browser. If you chose “Decline”, or have not chosen yet, the analytics scripts are not loaded at all. In addition, with the same consent we count visits ourselves: the browser stores a random identifier and once a day sends our server a single “visited today” mark — no page list, no behaviour tracking, no link to your account.

Location — it never leaves your device. The site and the mobile app may ask for access to your location so they can open the city nearest to you straight away. The coordinates are processed on the device itself and are never sent to our servers — all that leaves is the name of the chosen city. You do not have to grant the permission: the city can be picked by hand, and the rest of the app works without it.

2. What we do not collect

• Unique device identifiers and advertising identifiers.
• Contacts, photos, files, camera or microphone access.
• Payment details — the app has no payments.
• Anything about what you do on other websites.

3. Why we use the data, and on what basis

• Your account, favourites and saved searches — to provide the service you chose to use (performance of our contract with you).
• Replies to your support requests — at your own request.
• Service logs — to find failures and counter abuse (our legitimate interest in keeping the service working and secure).
• Visit analytics — solely on the basis of your consent, which you give in the cookie banner and can withdraw.

4. Cookies and local storage

Some data is kept in your browser rather than with us:

• the theme you picked — light or dark;
• your answer to the cookie banner;
• a random identifier used to count visits (only with analytics consent);
• the parameters of your last search, so you do not have to set them again;
• session tokens while you are signed in — they are removed when you sign out.

We use no advertising or tracking cookies. You can change your decision about analytics at any time in your profile — the Analytics switch takes effect immediately, with no need to reload the page.

5. Who we share data with

We do not sell your data and do not hand it to third parties for their own benefit. Parts of the service run on third-party technology, and those parties receive a limited set of data:

• Google — signing in with a Google account, and Google Analytics if you consented to it.
• Apple — signing in with an Apple ID.
• Yandex — the maps on the search and listing pages. The map is loaded from Yandex servers, so Yandex sees your IP address and which part of the map you opened.

Beyond that, we may disclose data where the law requires it, or where it is necessary to protect the rights and safety of Homespot users.

6. How long we keep data

Account data, favourites, saved searches and the reviews you left are kept for as long as the account exists. When you delete your account, they are deleted with it and active sessions are terminated.

Service logs are kept for 30 days, after which they are deleted.

7. How we protect data

Connections to the site and the app are encrypted. Passwords are stored only as a hash with a unique salt — the original password cannot be recovered from the database, not even by us. Access to data is limited to a small number of people and only to the extent the service requires.

No system is completely secure, so we cannot promise absolute protection, but we undertake to notify you if a breach affects your data.

8. Your rights

• Obtain a copy of the data we hold about you.
• Correct inaccurate data.
• Delete your account together with all its data. You can do this yourself in your profile — the “Delete account” button — or by writing to us at support@homespot.by.
• Withdraw your consent to analytics at any time.
• Object to processing carried out on the basis of legitimate interest.
• Receive your data in a machine-readable form to move it to another service.
• Lodge a complaint with a data protection supervisory authority.

We answer such requests within 30 days.

9. Children

The service is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us their data, write to support@homespot.by and we will delete it.

10. Changes to this policy

We may update this policy. The date of the last update is shown at the top of the page. We will announce material changes in the app or by email — we will not swap the terms out quietly.