Privacy Policy

This explains what we store about you, why, and what you can do about it. It is written to be read, not to be impressive.

Who is responsible

Rentahouze is a personal project, run by one person in the Netherlands. It is not a company, charges nothing and earns nothing. For anything in this document — including a request to see or delete your data — write to info@rentahouze.com and you will reach that person directly.

What we store, and why

• Your account — your name, your email address and your password. The password is never stored as you typed it; it is put through a one-way function, so nobody here can read it. We need this to let you log in and to recognise your houses as yours.
• Your houses — everything you type into the listing form, including the address and map location you choose. This is meant to be public: it is the listing. Only put in what you are comfortable showing the world.
• A login cookie — a random value that tells us you are signed in. It expires after 30 days. It cannot be read by scripts and is only sent to this site.
• Failed login attempts — your email address and the time, kept for 24 hours. This is how we stop someone guessing your password over and over.
• Server logs — our hosting provider records requests, including IP addresses, to keep the site running and to spot abuse.

We do not track you, do not profile you, and run no advertising or analytics. There is no cookie banner because there is nothing to consent to: the only cookie we set is the one that keeps you logged in.

On what grounds

We process your account details because we cannot provide the service you asked for without them. The security measures — the login throttle and the server logs — rest on our legitimate interest in keeping the site usable and safe.

Who else sees it

We do not sell data and we do not share it for marketing. To run the site we rely on a handful of suppliers who process data on our behalf:

• Vercel — hosting and server logs.
• Supabase — the database, hosted in Frankfurt.
• Resend — sending verification and password emails.
• OpenStreetMap — when you use “Find on map”, the address you typed is sent to their service to look up coordinates.
• ImprovMX — forwarding mail sent to our contact address.

Some of these are based outside the European Economic Area. Where that is the case, transfers rely on the European Commission's standard contractual clauses.

How long we keep it

Your account and your listings stay until you ask us to remove them. Failed login attempts are deleted after a day, and login sessions expire after 30 days. Server logs are kept by our host for a limited period.

What you can ask for

You can ask to see what we hold, to correct it, to have it deleted, or to receive a copy in a portable form. You can also object to processing based on legitimate interest. Email info@rentahouze.com and we will handle it within a month.

We would rather you came to us first, but you are entitled to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

If this changes in a way that matters, the date at the top changes and we will say so on the site rather than hoping you re-read it.