What we keep, and what we do not

Your mobile number is your account. There is no email address and no password. If you list a property, that number is shown on the listing, because the whole point is that buyers can ring you about it.

Your number is not shown on anything you do as a buyer. When you answer the one question after a call, the seller sees the answer and never sees who gave it.

When you create an account your phone makes a passkey. The secret half never leaves your phone — we only keep the public half, which is useless to anyone who copies it. We cannot see your fingerprint or your face, and neither can your phone send them to us.

The six word recovery phrase is stored only as a one-way hash. We cannot read it back to you, which is why losing it matters.

Photos you upload are stored on our own server in Lithuania, not on anyone else's cloud. When you upload one from your phone it is resized in the browser before it is sent, and that re-encoding removes the location data your camera had written into it.

Photos taken with the Aytebar camera are different, on purpose: we record the time our server received them, and, only if you allow it when your phone asks, where the phone was standing. That is what lets a listing tell buyers the photo was taken at the property rather than saved from somewhere else. Refusing the location permission does not stop you taking photos.

When you tap Call we record that you called about that listing, so we know who to ask the one question afterwards and so the same person cannot answer twice. Your answer, Yes or No, and the reason you pick are kept against that call.

Sellers see the counts and the reasons. They never see which caller said what.

We keep your device's browser name with each sign-in, so you can tell your own sessions apart, and your IP address briefly when you request something that costs us money or could be abused — creating accounts, opening seller numbers. Those IP records are deleted as they age out, usually within the hour.

Almost nobody. The site loads its typefaces from Google Fonts, which means Google's servers see the IP address of anyone who visits. Nothing else on the page talks to a third party: no ad network, no analytics, no social widgets.

If you sign in with WhatsApp, Meta tells us the number your message came from. We never send you a WhatsApp message, so Meta learns nothing from us about you.

Open your account page and choose Delete my account. Your number, your name, your agency, your passkeys and your recovery phrase are erased, your listings and their photos are removed from the site, and you are signed out everywhere.

One thing survives, deliberately: the Yes and No answers you gave about other people's listings. Those are what other sellers' scores are built on, and removing them would rewrite the record for people who did nothing wrong. They stay, with nothing attached to them that points at you.

Write to hello@aytebar.com about anything on this page, including a copy of what we hold about you.