Privacy policy

Private contact data stays out of analytics

Product analytics must not include phone numbers, email addresses, WhatsApp handles, raw inquiry text, private directions, coordinates, or exact private addresses.

Information you provide

• Account and sign-in information.
• Home offer, home request, saved search, contact, report, and promotion details you submit.
• Photos you upload for a listing after client-side resize and metadata stripping.
• Support or admin messages you send to Delalos.

How Delalos uses information

• Publish listings and requests that you choose to make visible.
• Send item-scoped email and in-app notifications for messages, saved-search matches, and promotion status.
• When you message someone about an item, they get a notice with your name and the item, linking to the conversation. It never includes your message text, phone number, or email address; if your name contains contact details, the notice says "Delalos member" instead.
• When you open someone's contact details, Delalos does not send them your name, phone number, or email address.
• Operate checkout for Delalos promotion-service purchases only.
• Moderate reports, abuse signals, paid promotions, and contact events.
• Measure product usage with privacy-filtered events.

Feedback form

When you use the Feedback page, Delalos stores your message, the page you were on, your language, the email you choose to give (used only to reply), your account id if you are signed in, and a scrambled form of your IP address that changes every day and is used only to limit abuse. Links in a message are replaced with "[link removed]", and a message with more than two links is refused. Each message is emailed to the Delalos admin inbox (admin@delalos.com), with your email as the reply address. In the Delalos database, the message is deleted after 12 months, your email is cleared after 90 days and the scrambled IP address after two days. The copies in the admin inbox, including your email, are deleted within 12 months. Cloudflare Turnstile, run by Cloudflare, checks that the request comes from a person and receives your IP address to do so. Legal basis: Delalos' legitimate interest in answering you, fixing problems and preventing abuse (GDPR Art. 6(1)(f)). To use your rights (access, correction, deletion, objection), write to support@delalos.com. Do not include passwords or payment details.

Providers

Delalos uses trusted infrastructure providers for hosting, authentication, uploads, email, payments, and product analytics.

Campaign attribution

Delalos sets no tracking or campaign cookie and stores no campaign data in your browser. When you open Delalos through a campaign link, Delalos reads only the campaign source, medium, and campaign-name slugs from the link you opened. As you move from that page towards posting (browsing, choosing what to post, signing in and filling in the form), and on the confirmation page after you post, Delalos keeps the same slugs in the address of those Delalos pages. It sends them with that visit, with a listing, vehicle advert, service advert or request you start or publish along that path, and with an inquiry you send from that page. They are not saved with what you publish. If you sign in first, these slugs stay in the return link that passes through our sign-in provider, Clerk, so Clerk receives that return address with the slugs. Delalos uses these fields to understand which campaigns lead to visits, posts, requests and inquiries. When an inquiry arrives through a Delalos promotion of that exact listing or request, Delalos stores only the promotion's campaign id with the conversation to measure promotion outcomes. It is not shown to the other person, and it is deleted when the owner first replies or 90 days after the inquiry, whichever comes first. Do not put names, contact details, messages, or exact locations in campaign links.

What Delalos does not do

• Delalos does not sell rent, deposits, or tenant-landlord payments.
• Delalos does not provide escrow, contract management, brokerage, or legal ownership verification.
• Delalos does not use analytics events to store contact values or raw message text.