Privacy Policy
This policy is arranged by how much you give away, starting with browsing, which gives away almost nothing, and ending with publishing a listing, which is public on purpose.
If all you do is browse
Two cookies arrive with the first page you open, and both expire two hours after the last one. Neither carries your name, and neither works on any other site.
- The session cookie
- Keeps one request connected to the next, so a form you began is still recognised as yours when you send it. Its contents are encrypted, and a script inside the page cannot read it.
- The token cookie
- Marks a form as having come from a page of this site. Without it, a form submitted on your behalf from somebody else's site would be accepted as if you had sent it.
Against that session the server keeps one line: the address the request came from, the browser that sent it, and the time. Those three make an attack visible. Which pages you opened is not kept anywhere beyond them.
No advertising network and no measurement service runs on these pages. Should either ever be switched on, this policy changes with it, and the date at the end of the page shows when it was last read through.
If you save listings
The saved list lives in your browser and is never sent here. When you open the page, your browser names the listings it holds so the cards can be drawn for you, and nothing about that choice is written down on this side afterwards. The page is kept out of search results for the same reason: it belongs to one person.
Two things follow, and both are worth knowing before you lean on it. Clear your browser data and the list goes with it. Open the site on another device and the list is not there.
If you use something that needs your name
Three things ask more of you than browsing does. Each row states what it takes and why that is kept rather than discarded.
| What you use | What it takes | Why it is kept |
|---|---|---|
| An account | A name, an email address, and your password stored as a hash instead of as the password | So you can sign back in, and so a reply reaches whoever holds the account |
| The report form | What you saw, which listing it concerns, a name and an email to reply to, and any file you attach | So somebody can act on it, and so the decision leaves a trace |
| Opening the contact details on a listing | Nothing about you. Your session remembers which listings you opened, so the details stay open while you keep looking | It expires with the session, in two hours |
If you publish a listing
A listing is public by intent, and everything in it was put there to be seen: district, hours, rates, services, photographs, and whichever contact route you chose to show. Treat every field as public from the first word. Publishing a listing means exactly that.
Which parts of a listing anyone stands behind is laid out in About Us.
Who else ever sees a listing or a message
Nothing here is sold, and nothing is handed on for anyone to advertise against. Three kinds of recipient exist, and there is no fourth.
- The companies that run the machinery — hosting and email delivery, which cannot carry a page or a message without touching it.
- An authority — where the law compels it, or where staying quiet would leave somebody exposed.
- Anyone at all — though only the parts an advertiser put up on purpose.
How long each part lasts
- The two cookies — two hours from the last page you opened.
- The line against your session — while it is still useful against attacks, then discarded.
- An account — as long as the account does, and removed when it closes, apart from what a record must keep.
- An unpublished listing — stops being public the moment it comes down, though the fact that it existed survives, so a moderation history does not vanish with it.
- A safety report — kept longer, deliberately. One report often means little alone, and a pattern across several is the only way some problems surface at all.
Requests that never come from this desk
Anyone asking you for one of these is not writing from here, whatever name sits on the message.
- A password, or the code your phone shows — nothing here runs on either.
- A payment card number — where a payment happens at all, it happens on the payment provider's own page, and what returns here is whether an invoice was settled.
- An identity document — unless it was asked for in writing, with the reason stated in the same message.
- Anything about your health — it has no use here and nowhere to sit.
Forward anything of that kind using the Report link on the listing it concerns, and paste the original message into it.
Asking about your own data
Name in one sentence which of the four you want — access, correction, deletion, or a copy — and send it with the Report link on the listing your request concerns. Whoever answers puts a question back to you before anything private moves. They have to establish they are talking to you rather than to somebody wearing your name, and the check is there for your sake rather than the site's.
Hong Kong keeps its own authority for personal data, and the Office of the Privacy Commissioner for Personal Data sets out which rights you hold and what happens to a complaint. Reading it first often settles a question faster than asking here. The rules this policy sits beside are in the Terms of Use.