Privacy policy

This policy explains what data Shtepi.org collects, why, and what rights you have.

What we collect

• Account details: name, email, phone number and, for agencies, the office name and address. Passwords are stored hashed and cannot be read by anyone.
• Listings: the text, price, location and photos you publish. These are public.
• Messages: when you ask about a property, your name, email, phone and message are sent to the listing's publisher.
• Technical data: your IP address and one cookie that keeps you signed in.

Why we use it

• To create and protect your account.
• To publish listings and connect buyers with publishers.
• To send service emails: address confirmation, password reset and new-message notices.
• To prevent abuse and fraud.

We do not sell your data and do not send marketing email without your consent.

Who we share it with

• The publisher of a listing, when you send them a message.
• Technical providers that help run the site: hosting and storage (Cloudflare), email delivery and, when you pay for promotion, the payment provider (POK or PayPal). Card details are handled only by the payment provider; we never see or store them.
• Authorities, when the law requires it.

How long we keep it

Account data is kept while the account is active. Listings and messages are deleted when you delete the listing or the account.

Cookies

We use a single essential cookie for signing in. The map on a listing page is loaded from OpenStreetMap.

Your rights

Under Albanian data-protection law you can ask to access, correct or delete your data, and complain to the Information and Data Protection Commissioner. Write to info@shtepi.org.