Privacy Policy

1. Data Controller

This Privacy Policy applies to the location intelligence platform accessible at barrioradar.com ("BarrioRadar", "we", "us").

Data Controller: Martin Wells, operating BarrioRadar in Spain.

Privacy Contact: For privacy inquiries, data subject requests, or to exercise your statutory rights, contact: info@barrioradar.com.

We process personal data in accordance with the European General Data Protection Regulation (Regulation EU 2016/679 - GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

2. Personal Data We Collect

We apply strict data minimization principles and only collect information necessary to provide property location analysis, manage purchase credits and subscriptions, deliver branded dossiers, and maintain server security:

A. Account, Sign-In & Authentication Data

• Email Address: When you sign in to BarrioRadar, you provide your email address to receive a secure, passwordless sign-in link (magic link).
• Session Authentication Token: Upon verifying a sign-in link, a secure authentication token is generated and stored locally in your browser to maintain your sign-in state and authorize your requests. We do not use or store passwords.
• Temporary Sign-In Links: When requesting a sign-in link, a cryptographically secure token hash is stored with an expiry time of 15 minutes.
• Browser Extension Authentication & Pairing: If you connect the BarrioRadar browser extension to your account, a dedicated extension credential is generated via a secure cryptographic exchange and stored in your browser's local extension storage. Extension credentials are strictly segregated from web session tokens.

B. Orders, Property Credits & Subscriptions

• Property Credits: When you purchase Property Credits, we record the transaction amount, currency, order reference, payment provider identifiers, and your available credit balance.
• Permanent Property Unlocks: When you unlock a full property analysis using a Property Credit or a direct qualifying permanent-unlock purchase, we record the canonical coordinates, cadastral ID, and verified address associated with your account. A permanent property unlock remains accessible to your account without consuming additional credits.
• Agent Pro Subscriptions: When you subscribe to Agent Pro, we process and store subscription administration data: Stripe customer identifier, Stripe subscription identifier, subscription status (e.g. active, trialing, past_due, canceled), billing interval (monthly or annual), current billing and entitlement period dates, cancellation status, transaction references, and associated account capabilities.
• Subscription Property Analyses: While an Agent Pro subscription is active, properties you analyse interactively are recorded in your account location analysis history with coordinates, address, and analysis timestamps. These records document your usage history and metrics, but do not constitute permanent property unlocks.
• Payment Details: All payment transactions are handled directly by Stripe Payments Europe, Ltd.. BarrioRadar never receives, processes, or stores your credit or debit card numbers, card expiration dates, CVV security codes, or bank account credentials.

C. Branded Reports, Client Dossiers & Agency Profiles (Agent Pro)

• Agency Profile Information: Subscribers to Agent Pro may configure an agency profile consisting of their agency name, agent name, phone number, email, website URL, and an uploaded agency logo (stored as a WebP image). This information is used solely to generate branded client-facing reports and dossiers upon your request.
• Saved Client Dossiers: When you generate a branded client dossier, we persist the property snapshot, custom listing title, asking price, internal reference, and agent notes.
• User-Entered Third-Party Data: If you choose to input client names or other third-party personal details into free-text fields (such as internal references or agent notes), you act as the independent data controller for that personal data and must ensure you have a lawful basis to process it. BarrioRadar acts solely as a technical data processor storing this content at your direction.

D. Embeddable Widgets

• Widget Configuration & Snapshots: When you configure a Location Summary Widget for a property, we store the canonical location, coarse address label, display title, default language, and the published score snapshot. Public widget endpoints serve only coarse location summaries and scores; private exact coordinates, owner account details, and user identifiers are never exposed publicly.

E. Search & Technical Logs

• Public Address & Flood Zone Searches: Public address searches and Flood Zone Checker requests are resolved in real time against official Spanish cartographic and flood-hazard datasets. Search query strings, exact coordinates, and portal identifiers are processed in memory and are not saved to personal search histories in our database; only anonymous daily municipality-level and flood-outcome aggregate counters are incremented.
• Security & Rate-Limiting Logs: We log client IP addresses and timestamps when sign-in links are requested or authenticated endpoints are accessed, strictly to enforce rate limiting and protect against automated abuse.

F. Research Reports & Optional Research Updates

• Transactional Research Report Delivery: When you request a free research report (such as The Spanish Property Market Report 2026), we process your email address, chosen report language edition (EN, ES, FR, or DE), a SHA-256 hash of your temporary download token (valid for 7 days and up to 15 accesses), delivery status, and request IP address solely to deliver the requested report and prevent automated abuse.
• Optional Research & Market Updates (Double Opt-In): Report delivery never requires marketing consent. If you optionally check the box to receive occasional updates when BarrioRadar publishes new Spanish property research, we send a dedicated confirmation link to verify your email address (double opt-in). Simply opening or downloading the report PDF never activates a marketing subscription. We record an audit trail of your consent request, confirmation, or withdrawal (timestamp, IP address, user agent, and consent wording version), and every research update email includes a one-click unsubscribe link.

3. Lawful Bases for Processing (GDPR Art. 6)

Purpose	Categories of Personal Data	Lawful Basis
Account sign-in & session management	Email address, session token, temporary sign-in link hash	Performance of a Contract (Art. 6(1)(b))
Delivering purchases, Property Credits & permanent property unlocks	Order references, credit balance, unlocked property coordinates, address	Performance of a Contract (Art. 6(1)(b))
Agent Pro subscription administration & billing entitlements	Stripe customer & subscription IDs, subscription status, billing interval, period dates, account capabilities	Performance of a Contract (Art. 6(1)(b))
Maintaining account property analysis history, client dossiers & widgets	Property coordinates, analysis timestamps, dossier configuration, widget data	Performance of a Contract (Art. 6(1)(b))
Commercial accounting, invoicing & tax records	Transaction amounts, currency, order references, Stripe transaction IDs, timestamps	Legal Obligation (Art. 6(1)(c))
Rate limiting, API security & abuse prevention	Client IP address, request timestamps	Legitimate Interests (Art. 6(1)(f))
Optional audience measurement analytics	Pseudonymous analytics client identifier (GA4)	Consent (Art. 6(1)(a))
Optional advertising & conversion measurement	Campaign conversion tokens & advertising measurement identifiers (when enabled)	Consent (Art. 6(1)(a))
Delivering requested research reports via email	Email address, selected report language, temporary download token hash, delivery timestamps	Performance of a User Request / Pre-Contractual Steps (Art. 6(1)(b))
Optional research & property market update emails	Email address, language preference, double opt-in confirmation & consent audit record	Explicit Consent (Double Opt-In) (Art. 6(1)(a) & Spanish LSSI-CE Art. 21)

4. Cookies & Browser Storage

BarrioRadar applies a strict purpose-based privacy architecture that separates essential platform operations, internal first-party attribution, optional analytics, and optional advertising measurement:

• No Server Cookies: Our web server sets zero HTTP cookies.
• Browser Local Storage: We use your browser's local storage solely for essential operations and persisted preferences: barrioradar_lang (language preference), barrioradar_consent_v2 (cookie and privacy choices), and barrioradar_auth_session (signed-in user session token and account state).
• Essential / Strictly Necessary Processing: Always active. Required for account authentication, API security, active purchase transactions, and interface language. Essential operational storage cannot be turned off.
• First-Party Conversion Attribution: When a user navigates to BarrioRadar via a campaign URL containing standard attribution parameters (such as utm_source, utm_campaign, utm_content), these parameters are retained in browser session storage and durably recorded on the resulting order record in our database if a purchase is completed. This first-party attribution enables us to evaluate our advertising investments internally without relying on or sharing personal data with advertising networks.
• Optional Audience Analytics (Google Analytics 4 & Consent Mode v2): All analytics permissions default strictly to denied (analytics_storage: 'denied'). While denied, Google Analytics operates exclusively via cookieless measurement pings without writing or reading analytics cookies (_ga). If accepted, standard GA4 first-party cookies measure site usage. We enforce an allowlist-only parameter sanitizer: no property addresses, coordinates, cadastre IDs, email addresses, or payment tokens are ever sent to Google Analytics.
• Optional Advertising & Conversion Measurement: In this release, neither the Meta Pixel nor Google Ads conversion tags are installed or executed in the application. Advertising measurement technologies remain inactive unless explicitly consented to and deployed.
• First-Party Aggregate Traffic & Geographic Counters: To monitor platform availability and coarse feature usage even when optional cookies are declined, BarrioRadar records anonymous daily counters (total page views, searches performed, checkout starts, purchases, and daily municipality-level flood check counts by assessment outcome). This system operates entirely without cookies, without user identifiers, and without persistent IP address or street-address storage.

5. Service Providers & Data Processors

We work only with technical service providers necessary to operate the platform and deliver services:

• Hosting & Infrastructure: BarrioRadar's application and database servers are hosted in Paris, France by Hostinger.
• Transactional Email: Hostinger International Limited (European infrastructure). Used exclusively to deliver 15-minute sign-in magic links, requested research report PDF links, and optional double opt-in confirmation emails.
• Payment Gateway: Stripe Payments Europe, Ltd. (Ireland). Processes payment card transactions. Stripe acts as a processor for checkout services and an independent controller for fraud prevention and financial compliance. Any onward transfer to Stripe, Inc. (USA) is governed by the EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs).
• Audience Analytics (Opt-in): Google Ireland Limited. Used only upon explicit affirmative consent under the EU-U.S. Data Privacy Framework (DPF).
• Advertising & Conversion Measurement (Opt-in when enabled): When advertising campaigns and conversion measurement are enabled, technology providers such as Google Ireland Limited or Meta Platforms Ireland Limited may process conversion measurements strictly subject to affirmative user consent under GDPR Art. 6(1)(a).

6. Data Retention & Automatic Cleanup

• Security & Technical Logs: IP rate-limiting logs and expired/used sign-in link records are automatically purged after 90 days by an automated cleanup mechanism.
• Temporary Sign-In Links: Become unusable and expire after 15 minutes.
• Permanent Property Unlocks: Retained for the duration of your account so that the property remains permanently unlocked for your account.
• Agent Pro Subscription & Billing Records: Active subscription records are maintained while the subscription and account remain open. Commercial transaction records, invoices, and order documentation are preserved for 6 years in accordance with the Spanish Commercial Code (Código de Comercio, Art. 30.1) and statutory tax regulations.
• Subscription Property Analysis History: Records in your location analysis history are retained for the duration of your account to provide your analysis history and usage metrics. When an Agent Pro subscription ends, access to full dossiers for subscription-only properties is restricted via subscription entitlement checks; historical analysis records are not automatically deleted upon subscription expiry, but remain associated with your account until the account is deleted, subject to applicable statutory preservation and record-keeping requirements.
• Branded Reports & Client Dossiers: Saved client dossiers and agency profile data are retained for the duration of your account or until you explicitly delete individual dossiers via the client dossier dashboard.
• Embed Widgets: Retained for the duration of your account or until disabled or removed by you.
• Downloaded Reports: Reports or PDF documents lawfully generated and downloaded to your local device while you held an active unlock or subscription entitlement may continue to be retained and used on your personal device after that entitlement ends. BarrioRadar does not remotely inspect, monitor, or delete downloaded files residing on your own device.
• Account Deletion: Upon a verified account deletion request under GDPR Art. 17, your account profile, personal data, analysis history, saved dossiers, widgets, and credentials are permanently erased from our active database, subject only to statutory preservation requirements for commercial and tax records.
• Research Report Requests & Optional Subscriptions: Tokenized research report download links expire after 7 days (or 15 accesses), and expired report request records are automatically purged after 90 days. Unconfirmed marketing opt-in requests are automatically purged after 30 days. Confirmed research subscriptions remain active until you unsubscribe via the one-click link in any email or request erasure; consent audit logs and suppression records are retained as necessary to demonstrate compliance with GDPR Art. 7(1) and respect opt-out requests.

7. Your Rights Under GDPR

Under the GDPR and Spanish LOPDGDD, you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate information.
• Right to Erasure (Art. 17): Request deletion of your account and personal data, subject to legal record-keeping obligations.
• Right to Restriction of Processing (Art. 18): Restrict the processing of your data under statutory conditions.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3)): Revoke analytics consent at any time.

To exercise your rights or request account deletion, contact us at: info@barrioradar.com.

Right to Lodge a Complaint: You have the right to lodge a complaint with the Spanish Data Protection Agency: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid (www.aepd.es).

8. Chrome Extension Privacy Practices

Our browser extension (BarrioRadar - Idealista Location Intelligence) adheres to strict privacy standards:

• Permitted Domains: The extension operates strictly on property listing and detail pages on Idealista (idealista.com) and official Spanish Cadastre portals (sedecatastro.gob.es). It does not support or operate on Fotocasa or other property portals.
• Listing Location Extraction: Reads visible property listing titles, text, and map markers on the active Idealista page to identify coordinates or query BarrioRadar's public autocomplete API.
• Automatic Detail-Page Resolution vs. Search Cards: On an Idealista detail page, the extension automatically inspects the property's map coordinates to resolve the official Cadastre Reference (RC) from official Cadastre web services and check the location score. On search result list pages, it does NOT make automatic external network requests; it displays cached scores from local browser storage if previously resolved, and makes network queries only when the user explicitly clicks the BarrioRadar dropdown trigger for that listing card.
• Local Storage & Caching (chrome.storage.local): The extension uses chrome.storage.local solely on your device for: (1) Resolved Property Cache: Listing IDs, coordinates, Cadastral References, and location scores cached for 30 days to avoid repeated network queries when browsing listings. This cached data contains no personal data and is stored solely on your local device. (2) Installation Identifier: A randomly generated UUID identifying the extension installation for secure pairing. (3) Authenticated Account Pairing: If you connect your BarrioRadar account, the extension stores a dedicated extension credential (br_ext_*), basic profile data (user ID and display name), and account capability entitlements (such as Pro tools). Credentials are never exposed to web page scripts or synced across browsers. Disconnecting immediately deletes the credential locally and revokes it on the server. (4) Feature Policy Cache: Last-known-good server feature flags. (5) Developer Overrides: Optional local API endpoint configuration.
• External Network Requests: The extension communicates only with: (1) the BarrioRadar API (api.barrioradar.com) to retrieve feature policies, resolve autocomplete queries, fetch batch location scores (with a non-identifying source header), and verify account credentials; (2) the official Spanish Cadastre (ovc.catastro.meh.es) to query public cadastral services directly for Cadastre References and property units; and (3) Idealista (idealista.com) via same-origin requests on detail pages to locate map coordinates. It never transmits your browsing history, page visits, or search behavior across other websites.
• Zero Data Monetization: No extension data, browsing history, or user information is ever sold, transferred, or monetized.