SPOTTED./Privacy Policy

Privacy Policy

Effective date: February 22, 2026 · Last updated: February 22, 2026

SpottedNYC ("we," "us," or "our") is committed to protecting your privacy. This Policy explains what information we collect, how we use it, and the choices you have. By using our website (spottednyc.com) or Chrome Extension, you agree to the practices described here.

1. Information We Collect

1.1 Information You Provide

  • Feedback and reports. When you submit a bug report or feedback through our "Report an Issue" form, we collect the category you select, the message you write, and your name if you choose to provide it.
  • We do not require you to create an account or provide an email address.

1.2 Information Collected Automatically

  • Usage analytics. We record anonymous events such as building page views, search queries, Chrome Extension activations, and report-button clicks. These events include a timestamp, the type of action, and relevant metadata (e.g., building BIN, neighbourhood, bedroom count, asking price). We do not link these events to your identity.
  • Extension activity. When you use the SpottedNYC Chrome Extension on a supported listing page, the Extension reads publicly visible listing details (address, price, bedroom count, neighbourhood) from the current tab and sends them to our servers to perform a building lookup. We do not read, access, or transmit any other content from your browser, including browsing history, cookies, or data from other tabs.
  • Log data. Our servers may automatically record standard web-server log information such as your IP address, browser type, operating system, referring URL, and pages viewed. Logs are retained for a maximum of 30 days and are used solely for security monitoring and debugging.

1.3 Information We Do Not Collect

  • We do not collect your name, email address, phone number, or payment information unless you voluntarily submit them in a feedback form.
  • We do not use cookies for tracking, retargeting, or advertising.
  • We do not sell, rent, or trade any personal information to third parties.

2. How We Use Your Information

  • To provide building violation summaries, market-price comparisons, and related reports.
  • To improve the accuracy of our address-matching and data-aggregation systems.
  • To understand how users interact with the product so we can prioritise improvements.
  • To investigate and respond to feedback or bug reports you submit.
  • To detect and prevent fraud, abuse, or security incidents.

3. Third-Party Services

We use the following third-party services to operate SpottedNYC:

  • Supabase — our database and back-end infrastructure provider. Data stored in Supabase (building records, analytics events, and feedback submissions) is governed by Supabase's Privacy Policy.
  • Google Maps / Google Street View Static API — used to display building location maps and street-level imagery. Your use of these embedded features is subject to Google's Privacy Policy.
  • Render — our web-hosting provider. Render may process request metadata in accordance with their Privacy Policy.

We are not responsible for the privacy practices of these third parties. We encourage you to review their policies.

4. Chrome Extension Permissions

The SpottedNYC Chrome Extension requests the following permissions and uses them as described:

  • Content scripts. Allows the Extension to read publicly visible listing data on StreetEasy pages you visit, solely to initiate a building lookup. The Extension does not run on any other website.
  • Host permissions (streeteasy.com, supabase.co). Required to communicate with StreetEasy pages and our Supabase back-end. The Extension does not communicate with any other external server.

5. Data Retention

  • Analytics events are retained indefinitely in aggregated, anonymous form. No personal identifiers are attached.
  • Feedback and bug reports you submit are retained for up to 2 years so we can track resolution and detect patterns.
  • Server logs are deleted after 30 days.

6. Your Rights and Choices

  • Access and deletion. Because we do not link analytics data to your identity, we cannot retrieve or delete analytics records for a specific individual. If you submitted feedback and wish it deleted, please contact us using the information below.
  • Opt out of analytics. You may disable the Extension at any time from your browser's extension manager, which will prevent any further data being sent from your browser.
  • California residents (CCPA). We do not sell personal information. California residents may request disclosure of any personal data we hold by contacting us.
  • EEA/UK residents (GDPR). Our services are designed for use in the United States. If you access them from the European Economic Area or the United Kingdom, be aware that data may be transferred to and processed in the United States, which may not provide the same level of data protection as your jurisdiction.

7. Children's Privacy

SpottedNYC is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Security

We implement industry-standard security measures including encrypted connections (TLS/HTTPS), row-level security policies on our database, and limited internal access controls. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our services after changes are posted constitutes your acceptance of the updated Policy.

10. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us at:

SpottedNYC
New York, NY
[email protected]