Privacy
What is collected, why, and for how long.
The platform collects the details you enter and the minimum technical data needed to operate the service securely. When you contact an advertiser, the reply details you provide are passed to that advertiser so they can respond, and the version of the consent text you accepted is recorded with the request. Contact details submitted through a listing are not used to create an account for you. This page is the plain-language summary. The binding text is the reviewed policy version recorded with each submission.
Cookies and similar technologies
Every cookie this site sets, in one table. The necessary ones need no consent and cannot be switched off; the map is the only thing that asks, and it asks on the page where it appears.
| Name | Category | Purpose | Set by | Lifetime |
|---|---|---|---|---|
| georgia.session_token | Necessary | Keeps you signed in. Set when you sign in. | This site (sign-in) | 7 days, extended while you use the site |
| georgia.two_factor | Necessary | Holds the sign-in step while your second factor is checked. | This site (sign-in) | Minutes, during sign-in |
| NEXT_LOCALE | Necessary | Remembers the language you chose, when it differs from the one your browser asks for. | This site (language) | Until the browser closes |
| georgia_consent | Necessary | Records the choice you make in this dialog, with its date and the version of the purposes you were shown. | This site | 180 days |
| google.com / googleapis.com (Google Maps) | Maps | Google's own cookies, set only after you load a map. Google is the controller for them. | Google LLC | Set by Google; see Google's cookie policy |
There are no analytics cookies and no analytics script. Listing statistics count a signed-in save or enquiry once per day through a salted hash; nothing identifies a visitor who only reads.
Who receives what
The platform is operated from Georgia. The services below process data on the platform's behalf or, where stated, as controllers in their own right.
- Google Maps (Google LLC, USA): Only after you load a map: your IP address, browser details and the page address. Google is the controller for its own cookies and for what it does with them.
- Google Geocoding (Google LLC, USA): The address of a property, as typed by the person listing it, sent from the platform's servers to place the pin. No visitor data is sent.
- Email delivery provider: Your email address, your name and the text of the message the platform sends you: verification links, password resets, enquiry and account notices.
- File storage provider: Photos, documents and evidence uploaded through the platform, held in private storage and served through time-limited links.
- Hosting and database provider: Every record the platform holds, on servers the platform administers.
How long data is kept
The periods the platform enforces today. Where a period depends on accounting or dispute rules, the record is kept for as long as those rules require and no longer.
- Sign-in session: 7 days from the last day you used the site, then it ends on its own. Signing out ends it at once.
- Cookie choice: 180 days on your device, then you are asked again.
- Password reset link: 1 hour.
- Listing statistics events: 90 days, after which only the daily counts remain and they carry no identifier.
- Abuse-protection counters: Purged daily once their window has passed.
- Account, enquiries, saved listings, conversations: While your account exists. Ask for deletion from your account area; what the law requires the platform to keep is kept and the rest is removed or anonymised.
- Orders, invoices and payment records: For the period accounting rules require, after which they are removed.
- Audit records: Kept as an append-only record of staff actions and of requests about your data; they name actions, never the content of your messages or documents.
Your rights
If you are in the European Union or the European Economic Area, the GDPR gives you the rights below; the platform extends them to every account. Requests are answered within one month.
- Access: See what the platform holds about you. Your account area lets you download a copy at any time.
- Correction: Fix something that is wrong. Most fields you can edit yourself; for the rest, send a request.
- Deletion: Ask for your account and personal data to be deleted. Records the law requires the platform to keep are kept for that period only.
- Restriction: Ask for processing to be paused while a dispute is settled.
- Portability: Receive your data in a machine-readable file — the same download as access.
- Objection: Object to processing based on the platform's legitimate interest.
- Withdrawing consent: Change your cookie choice from the footer of any page. Withdrawing does not affect what happened before.
- Complaint: You can complain to the data protection authority of the country you live in, or to Georgia's Personal Data Protection Service.
Requests from your account area are tied to your verified email address, which is how the platform knows a request is yours. If you have no account, use the contact page and expect to be asked to confirm your identity.