Privacy Policy

1. Controller

The party responsible for data processing on this site is:
Name & postal address (as in the Impressum)
E-Mail: contact e-mail (as in the Impressum)

2. Overview

Akiya Search is a free, non-commercial hobby project. We aim to collect as little personal data as possible. You can browse listings, the map and discover pages without an account and without providing any personal data. Personal data is only processed if you choose to create an account and use the favorites, watchlists or notification features.

3. Hosting (Cloudflare Pages)

The website is hosted on Cloudflare Pages (Cloudflare, Inc.). When you visit the site, Cloudflare automatically processes technical connection data (e.g. IP address, browser type, date/time of request) in server logs to deliver the site securely and reliably. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). Data may be processed on servers outside the EU under appropriate safeguards (EU Standard Contractual Clauses).

4. Accounts & authentication (Supabase)

Login, accounts and your saved data are handled by Supabase (database & authentication provider). If you create an account, we process:

Legal basis: Art. 6(1)(b) GDPR (performance of the requested service) and, where applicable, Art. 6(1)(a) GDPR (consent). This data is stored only while your account exists.

5. Google Sign-In (optional)

If you choose "Sign in with Google", authentication is handled via Google OAuth. Google provides us only with basic profile information (e.g. your email address) needed to create your account. Your Google password is never shared with us. Google's own processing is governed by Google's Privacy Policy.

6. Local storage in your browser

We use your browser's local storage for a small functional preference (your selected display currency) and for the authentication session token managed by Supabase. These are necessary for the site to work and are not used for advertising or cross-site tracking. Favorites are stored only in your account, never on the device.

7. Third-party resources

To display the site, your browser loads resources from third-party providers, which may receive your IP address:

• Google Fonts (fonts.googleapis.com) — typography
• unpkg / jsDelivr — JavaScript libraries (e.g. map, Supabase client)
• OpenStreetMap / CARTO — map tiles on the map page
• Listing images — loaded from the original sources (e.g. SUUMO, LIFULL)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in delivering the site).

8. Advertising

This site may display advertising in the future. If advertising cookies or similar technologies that require consent are introduced, a cookie/consent banner will be added and this policy updated accordingly. Update this section once ads are enabled.

9. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15);
• rectification (Art. 16) and erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time (Art. 7(3));
• lodge a complaint with a supervisory authority (Art. 77).

To exercise any of these rights, or to delete your account and associated data, contact us at contact e-mail (as in the Impressum).

10. Changes

We may update this Privacy Policy to reflect changes to the Service or legal requirements. The current version always applies.