Privacy

What we collect

Pages you visit. We record which pages are opened, roughly how long they are looked at and how far down them people read. This is ordinary traffic measurement — it is how we find out which pages are useful and which ones nobody finishes.

Searches. We record the search text you enter and the structured interpretation of it, so we can improve how the matching engine reads ordinary language. This is not linked to an identity.

Product events. When a result is shown, opened, saved or shared, we record the event name, the business it relates to, the page it happened on and the time. This is what lets us tell a business how often it appeared in searches. It contains no name, email address or device identifier.

How you got here. The website that linked to you — the domain only, such as a search engine or an AI assistant — and any campaign tags in the address. We do not record the full address of the page you came from.

Approximate location. Country, state and city, worked out from your IP address by our hosting provider. This is city-level at best and is often wrong by a suburb or more.

Device basics. Browser, operating system, whether you are on a phone or a computer, screen and window size, language and time zone. All of it is reported by your browser to every website you visit.

Business account information. If you claim a business, we collect the contact details you provide. We use them to email you about that claim and, once it is approved, to let you sign in and maintain your listing — and for nothing else. Claiming a business does not sign you up to anything.

Your sign-in password. When a claim is approved we generate a password, email it to you once, and store only a scrambled version of it that cannot be turned back into the password. Nobody here can look yours up or tell you what it is; if you lose it, we issue a new one. You never choose it, which is deliberate — it means the password we hold is not one you use anywhere else.

The proof you send with a claim. Claiming a listing means attaching something that shows you run the business — a photo of your shopfront, a screenshot of your booking system, an invoice or a bill. This is the most sensitive thing we ask anyone for, so:

• It is stored privately and is never published, never shown on your listing, and never given out as a link. Only the person reviewing your claim can open it.
• If you attach a photo, your browser re-saves it before it is sent, which removes the location, time and camera details a phone normally embeds. We asked you to prove you run a business, not to tell us where you were standing.
• It is deleted as soon as a claim is refused, and within seven days of a claim being approved. We do not keep it once it has done its job.

Standard server logs. Our hosting provider records request logs, including IP addresses, for security and reliability. These are retained for a limited period.

Our own record of each request. Separately from the measurement described below, our server keeps a short note of each request that reaches it: the page, the time, roughly where the request came from, and what kind of client sent it. Unlike everything else here it is not driven by JavaScript, so it also sees automated visitors — search engine and AI crawlers — which is the main reason it exists: we allow those crawlers to read this site and this is how we find out whether they do. It holds no IP address and no code that identifies a person.

What we don’t collect

• No tracking cookies. Not advertising ones, not analytics ones, not any. The single cookie this site ever sets is the one that keeps a business owner signed in after they have deliberately signed in, it holds nothing but a random value, and signing out deletes it. Nothing about browsing the site sets a cookie, which is why you have never seen a cookie banner here.
• No third-party analytics or marketing scripts. The measurement above is our own code.
• No precise location. We never ask your browser for GPS, and we deliberately do not store the coordinates our hosting provider works out from your IP address — only the country, state and city.
• No consumer accounts, so no consumer profiles.
• Nothing that identifies you personally, and no way to follow you to another website.

How the measurement works

When you arrive, your browser generates a random number to group the pages of that one visit together. It is held in your browser’s session storage, so it is never sent to another website, it cannot be read by anyone else, and your browser erases it the moment you close the tab. It is sent to us with each measurement record and kept alongside them, which is what lets us see that four pages were one visit rather than four. It is generated fresh every visit and is not connected to you, to your device, or to anything you did before.

Because that number dies with the tab, it cannot tell us whether two visits in one afternoon were the same person or two people. So we also work out a short scrambled code from your IP address and browser, using an ingredient we change every day. It is worked out on our server, never sent to your browser and never stored on your device, and it cannot be turned back into your IP address or your browser. It exists to stop one person being counted as several.

Come back tomorrow and you are simply a new visit. Because the daily ingredient has changed, the same person gets a different code, and there is no mechanism — ours or anyone else’s, even holding all of the data — for joining the two up. That is deliberate: it is the difference between counting how the site is used and building a record of a person.

Businesses you save

Saved businesses are stored in your own browser’s local storage. They are never sent to us and never leave your device. Clearing your browser data removes them.

How we use it

To operate and improve the matching engine, to understand how people find and use the site, to show businesses aggregate statistics about how often they appear and are opened, and to keep the service secure. That is the whole list.

We do not sell personal information, and we do not share it for advertising.

Who we share it with

Only the service providers we need to run the site — principally our hosting, database and email delivery providers — and only to the extent required for them to provide that service. If we are ever legally required to disclose information, we will.

Your rights

Under the Australian Privacy Principles you can ask what personal information we hold about you, ask us to correct it, and ask us to delete it. If you have claimed a business, you can do most of that yourself from your dashboard. For anything else, get in touch and we will respond.

Retention

Traffic, search and product events are kept as individual records so that we can look at how a real visit unfolded, not just at totals. Those records are stored in a database we control for up to 24 months and are then deleted. Because none of them carry an identifier for a person, there is nothing in them to expire on your behalf, and no request to delete your data could be matched to a record even if you made one. Business account information is retained while the account is active and for a reasonable period afterwards, then deleted.

Changes

If this policy changes in a way that materially affects you, we will update the date at the top of this page and, for business accounts, notify you directly.