Privacy Policy

Last updated: March 18, 2026

1. Data Controller

Flathunt is the data controller responsible for your personal data as described in this policy. We process your data in accordance with the General Data Protection Regulation (GDPR) and applicable EU/EEA data protection laws.

2. What We Collect

Account data: email address and password when you sign up.

Waitlist data: email address when you join the waitlist.

Usage data: pages visited, features used, and interactions within the app, collected through analytics tools.

Technical data: IP address, browser type, and device information, collected automatically when you visit our site.

3. Legal Basis for Processing

We process your data based on:

  • Contract: processing necessary to provide you with the Flathunt service (account, listings, preferences).
  • Legitimate interest: analytics and performance monitoring to improve our service.
  • Consent: where required, such as for marketing communications.

4. Third-Party Services

We use the following third-party services to operate Flathunt. Each may process personal data as described:

  • Supabase — authentication, database, and email delivery. Stores your account data and app content.
  • PostHog (EU instance) — product analytics. Tracks page views and feature usage for identified users only.
  • Vercel Analytics & Speed Insights — anonymous performance and web analytics.
  • Mapbox — geocoding addresses for the criteria map. Processes address data you enter.
  • Upstash Redis — rate limiting. Processes IP addresses and user identifiers temporarily.
  • OpenRouter (LLM) — extracts structured data from listing pages you save. Processes listing page content only, not personal data.

5. Data Sharing

We do not sell your personal data. Data is only shared with the third-party services listed above, solely for the purpose of providing and improving Flathunt.

6. Data Retention

We keep your data for as long as your account is active. If you delete your account, your personal data is removed from our systems. Anonymous analytics data may be retained.

7. Your Rights (GDPR)

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with your local data protection authority

You can delete your account and all associated data directly from the Settings page in the app.

8. Cookies

Flathunt uses essential cookies for authentication and session management. Analytics cookies are used by PostHog and Vercel to understand usage patterns. You can control cookies through your browser settings.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.