Privacy

Why it is kept

To recognise you and let you into your own account.

To show others the listing and page you published, and to deliver your request to the right owner.

To count the daily limit: without a record of a phone number being opened the limit does not work and the catalog gets copied whole.

To settle disputes: who changed what and when is written down. Data is not sold and not handed to advertising.

Who sees it

Your name, organisation and listing text are public: anyone sees them.

Your phone number is not shown on its own. A subscriber opens it with the Show number button, and every opening is recorded.

Our team sees the data when a request or a dispute needs it.

There are three outside services: the sign-in code arrives through the Telegram bot; if you sign in with Google, Google recognises you; when the map opens the tiles load from the CARTO service.

We name CARTO because it is different: when the map opens your browser connects to that service by itself, and the service sees your IP address. Its terms are on the carto.com/attributions page. The sign-in page does something similar: the code for the Google button loads from a Google server, and Google sees your IP address then, even if you have not clicked anything yet. If you open the site inside the Telegram app, the Telegram code loads the same way. There are no advertising trackers, no pixels and no outside counters.

How long it is kept

While your account is open.

If you close the account it is made anonymous: the name and contact details are removed. This cannot be undone.

Orders, payments and the action list remain without the account: they are needed for accounting and disputes.

You can clear cookies and browser storage yourself: removing the site data in your browser settings also removes the language choice and the comparison list.

Your rights

In the cabinet you see and change your own data.

If you want your phone number to stop being opened, pick the Close a number topic on the Contact page.

Use the same form to close the account or to ask what is kept about you.

We answer on business days.

Cookies and browser storage

We use three cookies for signing in. All three are our own, there are no third party cookies.

ys_access: keeps you signed in, lives 15 minutes. Page code cannot read it, only the browser sends it to the server.

ys_refresh: renews the session, so you do not have to sign in again every 15 minutes. Lives 30 days. Page code cannot read this one either.

ys_in: tells the browser that you are signed in, lives 30 days. We made this one readable on purpose: while you are a guest, the page does not send the server a pointless request.

A fourth one is for language: NEXT_LOCALE remembers the language you picked for a year.

Everything else sits in the browser's own storage, on this device only. Nothing of it goes to the server except one item: that is ys-tg-token, and we say more about it below. The lifetime differs too: ys-compare, ys-visit, ys-first-seen, ys-nudge-snooze, ys-ad-quiet, ys-order-draft and the ones starting with ys-admin- stay until you clear them; ys-authed, ys-me, ys-tg-token and the ones starting with ys-req- disappear the moment you close the browser tab.

ys-authed and ys-me: your sign-in marker and a copy of your profile. They are there so the menu does not flicker when a page opens. When you sign out we remove both ourselves.

ys-compare: the comparison basket. ys-visit: so one visit is not counted twice. ys-first-seen and ys-nudge-snooze: the time of your first visit and the snooze time of the sign-up offer.

ys-ad-quiet: the quiet time for adverts. It holds a time number only, which advert it was is not written down. ys-tg-token: the sign-in marker inside the Telegram app. This is the one exception: it goes to the server with every request, because inside the app it takes the place of a cookie. The ones starting with ys-admin-: panel settings, they only exist in a staff browser.

We say this about ys-order-draft and the ones starting with ys-req- separately: they are the drafts of an order and a request you have not sent, so they hold text you wrote yourself, including a contact phone number. We do not take them, they stay in your browser. If you do not need it, you clear it yourself: by sending the form or by removing the site data in your browser settings.

There is no third party cookie and no third party tracker: everything listed above is our own.

The first time you open the site, a consent bar appears at the bottom. It asks permission for exactly four things: ys-first-seen, ys-nudge-snooze, ys-ad-quiet and ys-visit. Your answer is kept in ys-consent, holding the choice and the date, nothing else. That one does not ask for consent itself, because it is what carries your answer out: without it the bar would come back on every page. If you close the bar with the X, nothing is allowed and we ask again on your next visit. ys-consent-later remembers that you closed it until you close the tab.

If you do not allow it, the bottom advert banner is not drawn at all, the sign-up offer is not shown and the visit marker is not sent, so you are not counted in the visit numbers. The necessary cookies and entries listed above are set regardless of consent: signing in, the language choice, the comparison basket and your unsent drafts do not work without them.