Privacy policy

Ersin Ergül (ErSoftware), Ottilie-Bondy-Promenade 4, 1210 Vienna, Austria. Email: [email protected].

No data protection officer has been appointed; the conditions of Art. 37 GDPR do not apply.

Addresses, districts, the listing check and the AI overview work without an account. We then process only technical access data: IP address, browser identifier, requested URL and time. They serve to deliver the page, to limit request rates and to diagnose errors.

The listing check analyses the listing text you paste on our server. The text is transmitted for that purpose but is neither stored nor passed on.

Your browser stores locally (localStorage, never sent to us): the addresses you viewed last (“history”), the workplace address you chose for the commute estimate, and whether you dismissed the app-install hint. You can delete these entries at any time via your browser's site data.

The shortlist and reviews require an account. We then process: email address, display name, Firebase user ID and, with Google sign-in, the profile ID and profile picture Google transmits.

Shortlist: the addresses you add to your account, with timestamp.

Reviews: resident type (current or former), period of residence, five star ratings, optional free text, the reviewed address and the time of submission. Reviews are checked by us before publication and are published without your name or email address.

Notifications: if you leave it enabled in your account, we email you when a new review is published for an address on your shortlist. You can switch this off at any time under “Account”.

Account, shortlist, reviews and notifications: performance of a contract, Art. 6(1)(b).

Technical access data, rate limiting and error diagnosis: legitimate interest in secure operation, Art. 6(1)(f).

AI overview and neighbourhood data: legitimate interest in providing the service, Art. 6(1)(f). No personal data about you is processed here, only the requested address and public data.

Account data and shortlist: until the account is deleted, then up to 30 days in backups.

Reviews: for as long as the account exists. After account deletion, approved reviews remain published without any personal reference, as they serve other flat-hunters as experience reports. On request we delete them completely.

Technical access data: rate-limiting counters only in memory for a few minutes; server logs at the hosting provider for up to 30 days.

Error reports at Sentry: up to 90 days, then deleted automatically.

Listing texts: not stored.

AI requests: we store only the result (the area overview for the address); at the provider Anthropic the Claude API retention period of up to 30 days applies.

Google Ireland Ltd. / Google LLC (Firebase Authentication): registration, sign-in and session management. EU and USA.

Railway Corp.: hosting of the website, the backend and the database. USA.

Resend, Inc.: delivery of notification emails; receives your email address for that purpose. USA.

Anthropic, PBC (Claude API): generation of the AI overview. Only the address, public neighbourhood data and average review scores are transmitted, never account data, review text or your IP address. USA.

Functional Software, Inc. (Sentry): error monitoring for the website. When an error occurs in the browser or on the server, the error message, the affected code location, the page visited, browser and device type and load times are transmitted. Cookies and form, listing or review texts are not transmitted, and your IP address is not stored. Data is stored in the EU (Germany); the provider is based in the USA.

OpenStreetMap Foundation: delivery of map tiles directly to your browser; your IP address is visible to the OSMF. United Kingdom.

Neighbourhood, building and city data are fetched server-side from OpenStreetMap (Overpass, Nominatim), OpenPLZ and the City of Vienna (data.wien.gv.at). These requests contain only the address, no data about you.

Personal data is not passed on to landlords, property managers, listing portals or advertising partners.

Transfers to Google, Railway, Resend, Anthropic and Sentry in the USA rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified, otherwise on standard contractual clauses (Art. 46(2)(c) GDPR). The transfer to the OSMF relies on the adequacy decision for the United Kingdom.

wiewohntsich.at sets only technically necessary entries: the “i18n_locale” cookie for the language preference and, after sign-in, the Firebase sign-in token in browser storage. In addition there are the local entries for history, workplace and the app hint described in section 2.

Fonts and icons are served from our own server, not from Google, so loading a page does not send your IP address to Google.

There are no analytics, advertising or marketing cookies and no consent prompt, because nothing optional is loaded.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection.

Write to [email protected]. We reply within one month. To delete your account, an email from the registered address is enough.

You may complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

The “AI overview” is generated by Anthropic Claude from public neighbourhood data and is labelled accordingly (Art. 50 AI Act). It may contain errors and does not replace a viewing. No automated decision about you within the meaning of Art. 22 GDPR takes place.

All connections are TLS-encrypted. Passwords are stored only as hashes by Firebase; we never see them. Access to production data is restricted to the operator.

Changes to this policy are published here with a new effective date.