Privacy Policy

Last updated: July 27, 2026

SnagFlat is a Chrome extension that shows rent-stabilization and apartment orientation badges on supported NYC rental-listing sites (currently StreetEasy). We built it to need as little of your data as possible. This policy explains, in plain English, exactly what the extension does and does not do with information.

The short version: the only thing SnagFlat sends to our servers is the address of the listing you're looking at (plus its borough and zip, when available) so we can look up the building. No accounts, no tracking, no browsing history, and we don't sell anything.

What we collect and send

When you view a supported listing, the extension reads the listing's address — and, when the page provides them, the borough and zip code — and sends just those to SnagFlat's backend to identify the building and look up its public records.

The extension also reads publicly advertised listing details shown on the same page — the asking rent, bedroom/bathroom count, unit number, and the listing's URL — and sends them along with the address. These are facts about the listing (already public on the site), not about you; we use them to power the optional daily digest of notable listings. They are stored address-keyed, exactly like the lookup records described below.

That's it. In particular, the extension does not:

require or create any account, login, or profile;
collect your name, email, phone number, or payment information;
collect or transmit your browsing history or the other tabs/sites you visit;
contain any advertising or analytics trackers, fingerprinting, or third-party cookies;
sell, rent, or share your personal information with anyone for marketing.

(The analytics described under "This website" below apply only to the snagflat.com marketing pages — never to the extension.)

Data minimization & lookup records

We designed lookups to be address-keyed, not person-keyed. We do not associate the addresses you look up with your IP address or any user identifier.

We keep a record of each lookup — the address that was queried and the public building data we returned (rent-stabilization status, sources, orientation, etc.), plus a timestamp — to analyze and improve the product (for example, how often buildings are stabilized, how good our address matching is, and performance). These records contain no IP address, no account, and nothing that identifies you: they are about buildings and public records, not people. We do not sell them.

Permissions the extension uses

The extension reads the content of the listing page you are already viewing on supported sites, solely to extract the address and draw the badges. It does not read pages on other sites, and it does not watch your general browsing. The extension holds no secret keys; all data-source lookups happen on our backend.

Local storage in your browser

To avoid repeating the same lookup when you revisit a listing, the extension caches results locally in your browser using Chrome's extension storage (chrome.storage). Your results-page badge filter preferences are also stored there so they persist across pages and reloads. This data stays on your device; you can clear it by removing the extension or clearing its storage.

Third-party data services

To determine the badges, our backend matches the address against public New York City data sources and services. We pass along the address (and borough/zip) needed for these lookups; we don't send any personal information about you. These services include:

NYC Planning GeoSearch — the City's geocoder, used to turn the address into a building identifier.
NYC Open Data — public City datasets, including tax abatement/exemption records, building footprints, and property (PLUTO) data.
JustFix "Who Owns What" — a public, tenant-advocacy data service used for rent-stabilization signals.

These are operated by third parties under their own terms and privacy practices. We use them only to look up building-level public records, not to profile you.

Hosting

Our backend runs on Vercel. As with any web request, our hosting provider may process standard network metadata (such as IP address) transiently to deliver the response. We do not use that metadata to identify you or to link it to the addresses you look up.

This website

The marketing site at snagflat.com uses two analytics services to understand traffic and measure our marketing:

Cloudflare Web Analytics — a privacy-first, cookieless service that counts aggregate visits and page performance. It sets no cookies and does not fingerprint you.
Google Analytics (GA4) — used to measure site traffic and the effectiveness of our marketing. Google Analytics may set cookies and process usage data (such as pages viewed, approximate location, and device/browser information), as a third party under Google's privacy policy. We use it for aggregate measurement; you can opt out with Google's opt-out browser add-on or by blocking cookies.

These analytics apply only to this website. They are completely separate from the browser extension, which contains no Google Analytics, no advertising, and no third-party trackers — the extension only sends the listing address to our backend, as described above.

Daily digest email (optional)

If you sign up for the daily digest on snagflat.com, we store your email address — and nothing else about you — in our database. It is used solely to send the digest, which goes out once per day. Signups are double opt-in (we email a confirmation link first and never send the digest to unconfirmed addresses), and every email contains a one-click unsubscribe link that takes effect immediately. We do not connect your email to extension lookups, do not enrich it with other data, and do not sell or share it. Digest emails are delivered via Resend, our email provider, which processes recipient addresses under its own privacy policy. To be removed entirely, use the unsubscribe link or email us (below).

Children

SnagFlat is a general-audience tool for browsing apartment listings and is not directed to children under 13. We don't knowingly collect personal information from children.

Changes to this policy

If we make material changes, we'll update this page and revise the "last updated" date above. Continued use of the extension after a change means you accept the updated policy.

Contact

Questions about privacy? Email privacy@snagflat.com.