Privacy policy

Here we set out which personal data ShtepiMeQera.org collects, the reasons for collecting it, and the rights you hold.

What we collect

• Account details: name, email, phone number and, for agencies, the office name and address. Passwords are stored hashed and cannot be read by anyone.
• Listings: the text, price, location and photos you publish. These are public.
• Messages: when you ask about a property, your name, email, phone and message are stored on the site, shown to the publisher in their account and sent to them by email. A profile imported from public information that its owner has not yet claimed receives the messages at the business's public address.
• Technical data: your IP address, kept briefly in the counters that limit abuse, and one cookie that keeps you signed in. Views of a listing and pages opened on the site are counted per day without identifying the visitor: how often a page was opened, which site the visit came from, the kind of device and the phrases typed in the search.

Why we use it

• To create and protect your account.
• To publish listings and connect tenants with publishers.
• To send service emails: address confirmation, password reset and new-message notices.
• To prevent abuse and fraud.

We do not sell your data and do not send marketing email without your consent.

Who we share it with

• The publisher of a listing, when you send them a message.
• Technical providers that help run the site: hosting, storage and protection of the site (Cloudflare), email delivery (Resend), text-message codes when a business claims its profile (Twilio), automatic translation of listing texts into English and Italian (OpenAI; only the public listing text is sent), the map and the placing of addresses on it (OpenStreetMap).
• Authorities, when the law requires it.

How long we keep it

Account data is kept while the account exists; to close it, write to info@shtepimeqera.org and we delete it with its listings and messages. Messages about a listing are deleted with the listing. The counters that limit abuse (with the IP address) are deleted a day after their window ends, and expired sign-in sessions are deleted daily.

Cookies

We use a single essential cookie for signing in. The browser also keeps, for the length of the visit only, a mark that a listing was counted once as viewed and how many pages the visit has had. The map on a listing page is loaded from OpenStreetMap.

Your rights

Under Albanian data-protection law you can ask to access, correct or delete your data, and complain to the Information and Data Protection Commissioner. Write to info@shtepimeqera.org.