Privacy notice

Updated 16 October 2026. BrickScout is a property research application operated by the BrickScout project owner. For privacy questions, access or deletion requests, contact spam44841@gmail.com.

Information used

When you sign in with Google, our authentication provider receives your Google account identity, including your email address and basic profile information. We store your saved-property selections against your user ID so your shortlist is available when you return. Saved-property selections are private to that account under the application's database access rules.

The shared property database contains property addresses, sale prices, advertised rents, property characteristics, source links, supporting quotations and observation history. These are listing observations rather than guarantees of availability or achieved rent.

The dedicated property-alert inbox

The project owner's separate Gmail connection requests read-only access to the dedicated property-alert inbox. The importer searches for PropertyPal saved-search alerts, verifies the sender and subject, and extracts property information for the shared database. It does not send messages or change the mailbox. Website users do not grant Gmail access merely by signing into BrickScout.

Importer records can include email identifiers, processing receipts and property evidence. Raw alert emails can be retained on the importing computer or temporarily on an importer runner for processing and troubleshooting. The website does not expose raw mailbox messages or Google credentials.

How information is used

We use account information to provide sign-in, saved selections to provide your shortlist, and property observations to support browsing, maps and rental comparisons. We also use processing records to prevent duplicate imports and investigate failures. Google user data is not used for advertising or to train general-purpose AI models.

Service providers

Cloudflare serves the website. Supabase provides authentication, the shared database, saved selections and private importer-state storage. Google provides sign-in and the Gmail API. GitHub Actions is being configured to run the property importer; when active, its runners process the dedicated inbox connection and database import credentials. Project administrators can access operational data to maintain the service. Providers may process information in locations covered by their own service arrangements.

Map backgrounds are supplied by OpenStreetMap infrastructure, which receives ordinary browser requests such as your IP address and requested map tiles. Postcodes.io is used for approximate postcode locations. Where enabled by the project owner, public address queries may be sent to Serper to obtain indexed property evidence. Account credentials are not included in these public address queries.

Browser storage

The application uses browser storage for authentication sessions. Signing out ends the current application session; this does not delete previously saved properties.

Retention and your choices

Saved properties remain until you remove them or request account deletion. Property observation history and importer records are retained for comparison, duplicate prevention and troubleshooting; no automatic expiry period is currently configured. Backups or operational records may remain until separately removed.

You can remove saved properties in the app, sign out, or contact us to request access, correction or deletion of account information. The inbox owner can revoke the Gmail connection through their Google account permissions. Revocation stops future access but does not automatically erase observations already imported.

Changes

We will update this notice when the application's data handling changes. The date above identifies this version.