Privacy policy
Last updated 15 October 2026.
Who is responsible
Ben Jonas Goedeke, Architect Venedikt Popov 4, 9006 Varna, Bulgaria. Email benthepythondev0@gmail.com.
What we store
| Data | Why | How long |
|---|---|---|
| Your email address and your key | To run your account and match payments to it (contract, Art. 6(1)(b) GDPR) | Until you ask us to delete the account |
| Each API call: time, endpoint, portal, credits used, status | To count credits and show your usage (contract) | As long as the account exists |
| Your monitors: the saved search, its webhook address and the last listings it saw | To run the daily check you set up (contract) | Until you delete the monitor |
| Plan, subscription and customer number from Lemon Squeezy | To give a paid plan its credits (contract) | As long as the account exists |
| IP address and the requested address in the web server log | To keep the service secure and find faults (legitimate interest, Art. 6(1)(f) GDPR) | 14 days |
| IP address at signup, in memory only | To limit free keys to three per address per day | 24 hours, never written to disk |
We use no analytics, no advertising trackers and no cookies.
Who processes it
- netcup GmbH, Karlsruhe, Germany: the server this site and the API run on.
- Apify Technologies s.r.o., Prague, Czech Republic: runs the readers that fetch listings from the portals. It receives your search (portal, place, filters), not your email or key.
- Lemon Squeezy (a Stripe company), USA: merchant of record for paid plans. It collects payment and billing details itself under its own privacy policy and sends us the email, plan and customer number. Transfers to the US rely on the EU-US Data Privacy Framework or standard contractual clauses.
- Cloudflare, USA: answers DNS queries for listingrail.com. Web traffic does not pass through it.
Fonts are served from this site; no request goes to a font provider.
On your device
If you tick "Remember on this device" on the monitors page, your key is kept in your browser's local storage, and after you request a key the email is kept there so checkout can fill it in. Both stay on your device; clear them in your browser at any time.
Data inside listings
Listings returned by the API can name an agent or show their phone number, as the portal publishes them. We pass them to you at your request and do not keep them, except in the last snapshot of a monitor you set up.
Your rights
You can ask for access to your data, its correction or deletion, a copy in a common format, a restriction of its use, and you can object to processing based on legitimate interest. Write to benthepythondev0@gmail.com. You can also complain to a data-protection supervisory authority; in Bulgaria that is the Commission for Personal Data Protection.