Privacy and how reports are handled
What we don't collect
We don't ask for your name and we don't need an account. Our server keeps no visitor logs. The only exception is a connection that trips our anti-abuse limits, whose IP is logged so it can be blocked and deleted within 3 days. We don't use analytics, advertising or tracking cookies. Reports are stored with the date only, not the time.
What we do store
The address, postcode and your description of the property or incident. Descriptions and any optional contact details are encrypted before they're saved, and only our reviewers can read them. They are never published.
To stop spam, your browser quietly solves a small puzzle when you send a report. This runs entirely on our own server; no third-party captcha or tracking is involved. We also use short-lived rate limits held in memory only.
What gets published
Nothing goes on the map until it has been investigated. For a verified HMO we show the address and, sometimes, a short note from our reviewer. For a verified incident we show the type, the month it happened and a short summary written by our reviewer. Your own words are never shown.
We never publish names or details about the people who live in a property.
How long we keep things
Raw reports are deleted 90 days after they've been reviewed. Rejected reports are deleted too.
Something wrong?
If you live at, own or manage a property shown on the map and believe the information is wrong, contact us using the link at the bottom of the home page and we'll review it promptly. Pins can be taken down at any time.