Privacy notice
What we collect, why, how long we keep it and how to control it.
We are still checking this text with legal advice, so some wording may change before Mini Casa opens to everyone. When it does, the date below changes too. 8 company details are still marked “to be confirmed”.
Policy version 2026-10-draft, last updated 2026-10-25.
Who is responsible
Company: to be confirmed, Registered address: to be confirmed, is the controller of your account data. Privacy contact: Privacy contact: to be confirmed. The controller and processor roles and the data map are still being finalized.
What we collect
Your email address and name, your sign-in methods (never provider passwords), your language and time zone, the casas and revisions you create, consent records, and security audit events. Published casas are public by design.
Why we use it
To run your account, publish your casas, keep the service secure and, only if you opt in, send product updates or count usage in aggregate.
Who else sees it
The list of subprocessors (hosting, email delivery, storage, Umami Cloud for cookieless page-view statistics, and a password-breach check: when you choose a password we send only the first five characters of its SHA-1 hash to the Have I Been Pwned range service, never the password or your account) and regional handling is still being finalized. We do not sell personal data and we do not put personal data in requests to outside services.
How long we keep it
Operational data is pruned on a schedule shown in Settings. Deleted casas and accounts can be restored for 30 days and are then erased. Backups expire after about 35 days. These periods are proposed and not yet final.
Your rights
You can see and change your consent choices, export your data and delete your account from Settings. For anything else write to Privacy contact: to be confirmed.
Logs and analytics
We keep secrets, email bodies, tokens and private URLs out of logs and analytics. We count page views on this site, the app and every published casa with Umami Cloud, without cookies: it receives the page address (with IDs and query strings removed before sending), the referring site, browser, device type, language and an approximate country derived from the IP address, and does not store the IP address. Staff pages are never counted. Account-level usage analytics still need your choice first.
Changes and contact
When this notice changes we publish a new policy version and record which version each consent was given under. Contact: Privacy contact: to be confirmed.
Subprocessors and automated report review
When someone reports a casa, we may send the text of the report and a text-only copy of the reported casa (titles, bio, link labels and addresses, post text) to Anthropic, PBC, our subprocessor for automated triage, to suggest how urgent the report is. We never send images, the reporter’s email or other contact details, or the casa owner’s email. The model only advises; a person decides, and the only automatic actions are taking a casa out of Explore pending review and applying the 18+ label, both reversible. Child-safety reports are never sent. Draft wording for counsel to review; the subprocessor list, region and data processing terms are not final.
Previews made for you
Mini Casa staff, or a friend of yours, can make a private preview of a public link page so you can see it as a Mini Casa page. A preview uses only what your page shows publicly (your name, bio and links; not your photo unless you claim it), lives at a private link that is never listed or indexed, says you did not make it, and is deleted after 30 days. Addresses published on your page are kept encrypted and only used to send a claim link when someone asks for one; we never email you about a preview unprompted. You can remove a preview in one click, without an account, and ask us never to make one of your page again; we then keep only a one-way hash of the page address. Our basis is legitimate interest (notice version under review). Contact: Privacy contact: to be confirmed.
Free tools and domain lookups
When you use one of our free domain tools, our servers send only the domain name or web address you entered (never your account, email or IP address) to the services that hold the answer: the registry for that ending and the registrar it lists (over RDAP); the domain's own nameservers, our DNS resolver and the public DNS resolvers of Google, Cloudflare and Quad9 for the DNS checks; and Team Cymru, which receives the IP addresses a domain points to so the hosting check can name its network. The SSL checker connects to the site you entered, and the redirect checker to it and to every address it redirects to, which can be other sites. If a tool asks you to confirm you are human, Cloudflare Turnstile runs that check. We keep no history of what you looked up. We keep a daily count per tool and technical logs without the names. Keyed hashes of your IP address and of the name are held briefly in our cache to apply rate limits. Results may be cached for up to an hour, keyed by a hash of the name. Names in a bulk check are held encrypted for 15 minutes so the result can reach you, and a found name is held encrypted for 30 minutes behind its “add to your shelf” link, whether or not you use it. Names on your shelf are part of your account: we look up their registry details the same way, keep those details with the name, and cache each lookup for up to six hours.