What we collect

• No account, ever.

  You never give us a name, an email or a password, because nothing here asks for one.

• We set no cookies and run no advertising trackers.

  No advertising pixel, no session identifier, nothing that follows you to another site. There is a cookieless page-view counter, described below, and the map on a building report is Google’s and may set its own cookies.

• Your saved buildings stay in your browser.

  The buildings you save live in your own browser storage. They are never transmitted to us and we cannot see them.

• We do not sell anything about you.

  There is nothing to sell. We hold no profile of you to build one from.

Three things, and this list is exhaustive.

The address text you type. To turn what you type into a real building, we forward it to NYC GeoSearch, the city’s own address service, run by the Department of City Planning. We keep the normalised search text and the matching addresses in our database so that the site still works when the city’s service is down. That record is the text of the search only. It carries no identifier, no session and nothing connecting it to you or to any other search.

Your IP address, briefly. Each request carries an IP address, as every request on the internet does. We hold it in memory for up to sixty seconds to count requests and stop one source overwhelming a free city API. It is never written to our database and never linked to a search.

Ordinary server logs. Our host records the usual request information, including IP address, for security and diagnostics, and discards it on their normal schedule. We do not mine those logs to build profiles.

A count of page views, and how fast pages loaded. Vercel Analytics and Speed Insights record that a page was viewed, roughly where in the world the request came from, and the loading measurements your browser reports. They set no cookie and assign no identifier that survives the visit, so they cannot tell that two visits came from the same person, and nothing they collect is joined to the address you searched. Both are served from this domain rather than from a third party, so running them tells nobody new that you were here.

No names, no email addresses, no phone numbers, no payment details. No advertising identifiers and no analytics identifier that persists between visits. No location beyond the address you chose to look up. No contact list, no device fingerprint, no cross site tracking. We do not buy data about you from anyone and we do not sell or share data about you with anyone.

The map is the exception worth naming. Building reports embed a Google map, and it loads with the page rather than waiting to be asked. That means Google sees your IP address and the coordinates of the building on screen whenever you open a report, under their privacy policy rather than this one. Nothing we hold is sent to them, and there is no way for us to link that view back to you, because we never knew who you were.

Saving a building writes it to your browser’s local storage under the key aptright.shortlist.v1. This is not a cookie and it is never sent with a request. It stays on the device you saved it on, which is also why your saved buildings do not follow you to another browser.

Clearing site data for aptright.com in your browser settings deletes it permanently. So does pressing Saved on each building to remove it.

• Vercel

  Hosts the site and runs the code. Sees the requests your browser makes, including your IP address.

• Neon

  Runs the database holding the city records and the cached address searches.

• NYC GeoSearch

  The city address service your search text is forwarded to. Operated by the Department of City Planning.

• Google Fonts

  Serves the two typefaces this site uses. Loading a font from Google reveals your IP address to Google, as it would on any site using their fonts.

• Google Maps

  Draws the map on a building report. The map loads with the page, so viewing a report tells Google your IP address and which building you are looking at, and Google may set its own cookies. It is the only third party on this site that learns anything about what you looked at.

Links out to HPD Online and to NYC Open Data are ordinary links. We do not tell those sites anything about you, though your browser will send the usual request information once you follow one, as it does with any link.

Rights of access, correction, deletion and portability apply to personal information a business holds about you. We hold none, so in practice there is nothing for us to hand over or erase. If you believe we hold something about you, write to us and we will look and tell you plainly what we find.

We do not sell or share personal information as those terms are defined in California law, and there is no opt out to offer because there is no such processing to opt out of.

Records about buildings and owners are a different matter. The violation, registration and ownership records shown here are public records published by New York City. We do not create them, we cannot change them, and requests to remove or amend them have to go to the agency that issued them. Every figure on a report links to its source so you can take it up with the right office.

This site is meant for people looking for somewhere to live and is not directed at children. We knowingly collect nothing from anyone, of any age.

If we ever add something that collects more than the above, an account system, a payment method, or analytics, this page changes first and the date at the top changes with it. We will not quietly start collecting something and describe it later.

Questions about any of this go to privacy@aptright.com.