Privacy Policy

What we collect

• Email address. Required for magic-link sign-in and alerts.
• Watchlist addresses (with optional nickname).
• Address and email submitted to the free /check tool. We store it to show you the result and, separately, in case you want to sign up later.
• Phone number — only if you enable SMS alerts. SMS is not yet available.
• Server logs (IP, user agent, timestamps) — for security and rate-limiting. Retained 30 days.

What we do NOT collect

• Passwords. We use magic-link authentication; there are no passwords to store.
• Government IDs, SSNs, or driver's license numbers.
• Payment information — when paid plans launch, Stripe handles payments. We never see your card.
• Any data from sources other than the City of San Diego Open Data Portal.

How your data is used

To operate the service — sign you in, send alerts about your watched properties, and power the address-check tool. We do not use your data for advertising, profiling, or any unrelated purpose.

Who we share data with

• Resend — delivers your email (sign-in links and alerts).
• Sentry — error reporting. PII is stripped before events are sent.
• US Census Geocoder — we send addresses (not tied to user identity) to canonicalize them. Cached locally so each unique address is sent at most once.
• Stripe — will process payments when paid plans launch.

We do not sell data. We do not share with advertisers or data brokers.

Data sourced from the City of San Diego

STRO license and complaint data originates from the City of San Diego Open Data Portal and is already public record. That data includes host names, local contact names, and local contact phone numbers as published by the city. We mirror it for members but do not expose it on public pages or allow non-members to search it.

Your rights

• Access — sign in to view everything we have on you.
• Deletion — email privacy@str.watch. We delete within 14 days.
• Export — email the same address to request a copy of your data.
• California (CCPA) — we honor CCPA requests from residents of any state.

Cookies and tracking

One session cookie to keep you signed in. No third-party analytics, no tracking pixels, no advertising cookies.

Children

Not directed at anyone under 16. We do not knowingly collect data from children.

Changes to this policy

Material changes will be emailed to the address on your account. The "Last updated" date above reflects the most recent change.

Contact

privacy@str.watch