Privacy Policy

Last updated: October 26, 2026

Nhazo (nhazo.com) is a map of real estate listings in Vietnam. We collect public listings from real estate websites and show them on a map. With an account you can save listings to favorites and post your own. This page explains what data we receive, why, who else processes it, and how to delete it.

What data we receive

From every visitor

• IP address and technical details of the request (browser, page opened). They are seen by our server and by Cloudflare, which delivers the site.
• Your chosen language and city, stored in the nhazo_lang and nhazo_city cookies. Interface settings are kept in your browser's storage.
• Google Analytics visit statistics: which pages are opened and how often. Google sets its own cookies for this (_ga).

If you create an account

• Email address, name (if you entered it or it came from Google) and the language of emails.
• Password — only as an Argon2id hash. We never store or see the password itself.
• Dates of sign-up and last sign-in.
• Your session: the __Host-nhazo_session cookie holds a random key; our database keeps only its hash.
• Favorites — the listings you saved.

If you sign in with Google

We request only openid, email and profile from Google. Google sends us your Google account ID, your email address (and whether it is verified) and your name. We do not store your profile photo. We have no access to Gmail, contacts, files or any other Google data.

If you post listings

• The text, price, area, map location and photos are published on the site for everyone.
• Photos are downsized on your device, and our server re-saves them without metadata: shooting location (GPS), camera model and other EXIF data never reach the site.
• Your contact name and phone are shown only to a visitor who presses “Show phone”. They do not appear on the map, in lists or in search.

Emails and abuse protection

• Emails to confirm your address and reset your password are sent through an email service, which handles the recipient address and the message text.
• Attempts to sign in, sign up and send emails are counted by IP address and email. These counters are deleted after one day.

Why we use it

• To run sign-in, favorites and your listings.
• To show listings to visitors and connect buyers with sellers.
• To protect the site from password guessing and spam.
• To understand which sections are used, from statistics not tied to your account.

We do not sell data, do not show ads and do not share data with advertising networks.

Data from Google

Nhazo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only for signing in: your email and name become your Nhazo account details, and the ID lets us recognize you next time. We do not share it with third parties and do not use it for advertising or for training AI models. You can revoke access in your Google Account settings: myaccount.google.com/permissions.

Who else processes data

• Cloudflare — delivers the site and protects it from attacks.
• Google — Google sign-in and Google Analytics statistics.
• OpenFreeMap — the base map: your browser loads it from their servers.
• Listing source websites — your browser loads photos of collected listings from their servers.
• Machine translation services (language models) — translate listing texts, including yours, into the site's languages. They receive only listing texts, never your email, phone or account data.
• Email service — sends our emails.

How long we keep data and how to delete it

• You can delete your account under “Settings” — immediately and permanently. This deletes your email, name, password, sessions, Google link, favorites, and the contacts and photos of your listings. The listings are taken off the site; their text, price and location stay in our database without any link to you, for district price statistics.
• A session ends after 30 days without visits, or immediately when you sign out.
• Photos not added to a listing are deleted after one day, sent emails after 30 days, attempt counters after one day.

Your rights

“Settings” shows your email and lets you change your name, email language and password, and delete your account. To get a copy of your data, correct it or delete it, write to [email protected] — we reply within 30 days.

Children

Nhazo is not intended for children under 16, and we do not knowingly collect their data.

Changes

A new version of this policy is published on this page and applies from the date shown at the top.

Contact

[email protected]