Privacy policy

Who we are

The data controller is Gravisun Soft Kft., Budapest, Hungary ("we"). Contact: hello@flatrentbudapest.com.

What we collect

• Your email address, and your name and profile picture if you sign in with Google. We use it to sign you in and to send the emails described below.
• The profile details you choose to add: name, picture, phone number and date of birth. The name and picture are shown next to your messages; the phone number is shown to a host only after they accept your stay request; the date of birth is used only to confirm you are an adult.
• Listing data you enter (description, price, district, an area hint, and the contact details you choose to show). These are published on the site by your choice.
• Photos you upload. We remove embedded metadata such as GPS coordinates before storing them.
• A record of which listings' contact details you looked up and when. We use this to enforce a daily limit and to show landlords how many people asked for their contact.
• Server logs (IP address, browser, pages requested) kept for security for up to 30 days. Our CDN provider Cloudflare keeps its own logs under its policy.
• Usage analytics: Cloudflare Web Analytics (cookieless, does not identify you) and, only if you allow it in the cookie prompt, Google Analytics 4 (Google Ireland Ltd.), which sets the _ga cookies to tell returning browsers apart. Without your consent Google receives no cookies and no identifier.

Legal basis

Performance of the service you asked for (Article 6(1)(b) GDPR) for accounts, listings and contact reveals; our legitimate interest (Article 6(1)(f)) in keeping the site secure and free of abuse for logs, limits and reports.

Cookies

We use one strictly necessary cookie to keep you signed in and one that remembers your display currency. Saved and recently viewed flats stay in your own browser's storage and are never sent to us. Google Analytics cookies (_ga, _ga_*, kept for up to two years) are set only after you allow them in the prompt shown on your first visit; you can change your choice any time under Cookie settings in the footer.

Who processes data for us

• Hetzner Online GmbH (Germany), hosting.
• Cloudflare, Inc. (EU and US data centres), CDN and security.
• Gravisun's own mail server at Hetzner (Germany), transactional email such as sign-in links.
• Google LLC, only if you choose to sign in with Google.
• Google Ireland Ltd. (Google Analytics 4), only with your consent; data is processed in the EU and the US under Google's standard contractual clauses, with IP addresses truncated by Google before storage.

Security

Data is stored on servers in the EU and transferred over HTTPS. Photos are stripped of metadata before storage. Sign-in links expire after 15 minutes and work once. Contact details are only ever returned to a signed-in user who asked for them; they are never in page source, feeds or search results.

International transfers

Parts of Cloudflare's network operate in the United States. These transfers rely on the EU-US Data Privacy Framework or standard contractual clauses, as published by Cloudflare. Hosting, photos and email stay in Germany.

How long we keep it

• Listings: until you delete them or your account. Expired listings are hidden from the site but kept so you can renew them.
• Contact lookups: 12 months.
• Your account: until you delete it. Deleting your account removes your listings, photos and lookup records.

Your rights

You can access, correct, export or delete your data. Most of this you can do yourself from your account page; for anything else email us. You also have the right to complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

Children

The service is for adults who rent or let a flat. We do not knowingly collect data from anyone under 18.

Changes

We may update this policy; the date at the top is the current version. Material changes are announced on this page before they take effect.