Privacy Notice

1. Who we are

LeaseDrop is run by a small group of Stanford alumni as a community project. We are not affiliated with Stanford University or SuPost.

2. What we collect

To understand how people use the site and to keep listings reliable, we record usage events server-side. Each event stores:

• An anonymous browser ID (the ld_vid cookie) — a random string stored in your browser that is not linked to your name or email unless you sign in, subscribe to alerts, or submit feedback.
• The type of event (e.g. viewing a listing, searching, clicking out to SuPost, subscribing to email alerts).
• The listing ID you interacted with, if any.
• The request path (e.g. /listings?neighborhood=Palo+Alto) and the search / filter parameters you used.
• The Referer header and User-Agent string your browser sent.
• A one-way hash of your IP address (never the raw IP), used solely for rate limiting, abuse prevention, and coarse geography estimates.
• The timestamp of the event.

When you voluntarily provide an email address — for example to subscribe to listing alerts, to create an account, or to submit feedback — we store that email and link it to your subscription / account / feedback record.

3. Why we collect it

• Detect and remove dead or mismatched SuPost links before they reach you.
• Understand which neighborhoods, filters, and listings people care about so we can improve the product.
• Send email alerts to subscribers when new listings match their saved filters.
• Prevent spam and abuse (rate limiting, bot detection).

4. What we do not do

• We do not sell, rent, or share your data with third parties.
• We do not run third-party advertising trackers on LeaseDrop.
• We do not store raw IP addresses.
• We do not attempt to re-identify anonymous visitors.

We use Vercel Analytics for aggregate traffic counts; see Vercel’s privacy policy for details on that service.

5. Your choices

• Unsubscribe from alerts. Every alert email contains a one-click unsubscribe link, or you can go to /unsubscribe.
• Delete your account. Email us from the address associated with the account and we will remove it and any listings you posted.
• Clear your visitor ID. Delete the ld_vid cookie in your browser settings; a new anonymous ID will be issued on your next visit.
• Request a copy or deletion of your data. Contact us via the feedback page.

6. Retention

Event records are retained while LeaseDrop is operational. Expired listings are archived or deleted. Subscription data is retained until you unsubscribe, at which point we keep only the minimum needed to prevent re-subscribing you by accident.

7. Contact

Questions or requests? Reach us through the feedback page.