Privacy Policy

What we collect

• Your account.When you sign in with email, Google, or Apple, we store your email address and a display name (and an avatar if your provider supplies one). If you use Apple's Hide My Email, we only ever see the relay address.
• What you add and do. The listings you save, your scores, deal-breaker flags, notes, comments, statuses, and the searches and collaborators on them.
• Commute & location. If you set a commute destination, we store that address and travel mode to compute door-to-door times. If you grant location to improve address suggestions, your position is rounded to about a kilometer and kept only on your device — it is never stored on our servers.
• Usage & diagnostics.Basic product analytics and error reports so we can fix problems and understand what's useful (see “Third parties”).

Listings and photos

Stoop only ingests listings you give it — by pasting or sharing a URL. We don't crawl or scrape marketplaces. We store factual details (price, beds/baths, address, dates) and we link to listing photos from the source site — we never download, re-host, or copy those images.

How your content is shared

A search is shared with the collaborators you invite to it. Within a search, members can see its units, scores (once revealed), comments, and activity. Each person sees their own commute times. We don't sell your data or share it for advertising.

Third parties we use

We rely on a small set of vendors to run Stoop. They process data only to provide their service to us:

• Supabase — database, accounts, and file storage (hosted in the United States).
• Vercel — application hosting and web-performance analytics.
• PostHog — product analytics and session replay. Replay and analytics are configured to mask the text you enter and personal content (names, emails, addresses, notes).
• Sentry — error monitoring. Mapbox request URLs are scrubbed so location coordinates and API keys are never captured.
• Mapbox — geocoding and commute directions. Addresses you enter are sent to Mapbox server-side to resolve coordinates and routes.
• Resend — sending transactional email (invites and account email).

Cookies

We use cookies that keep you signed in and remember your theme. Our analytics may set identifiers to measure product usage. We don't use advertising cookies.

Your choices

• Location. The suggestion-bias location is opt-in and you can turn it off in Settings, which clears it from your device.
• Access & deletion. You can request a copy of your data or delete your account by emailing us. Deleting your account removes your profile and the content you own; content you contributed to a shared search may persist for the other members unless they remove it.
• Email.Account and invite emails are transactional. We don't send marketing email.

Data retention & security

We keep your data while your account is active and for a reasonable period afterward to meet legal and operational needs. Access is gated by row-level security so people only see searches they're part of. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

Stoop isn't directed to children under 13, and we don't knowingly collect their data.