Privacy Policy

Last updated 26 August 2026.

Perch (perch.rent) is an independent service operated from Serbia, and is the controller of the data described here. This page says what we hold, why, who else touches it, and how to make it go away.

What we store

• Your account — email address, display name, and a password hash. We never see your password itself.
• Your hunt — the lists, flats, notes, statuses and search criteria you create, including any address you type. Notes are free text, so whatever you put there is what we store.
• Listing data collected from public rental portals and attached to your hunt.
• Notification settings — whether you want the digest, and in which language.
• Rate-limiting counters — attempts at signing in, signing up and resetting a password. The client identifier is hashed before it is stored; we do not keep raw IP addresses.

What we do not do

• We do not sell your data, and we do not share it for advertising.
• We do not run advertising or third-party tracking pixels.
• We do not record your screen or your session.
• Error reports are sent without personal data attached, and carry no request bodies.

Who processes it on our behalf

Perch is a small operation built on services that each hold a part of it. All of these store data in the EU.

• Supabase (Frankfurt) — the database and accounts.
• Vercel — hosting and request logs.
• Resend (Ireland) — outbound email, so it handles your address and the message.
• LocationIQ — geocoding. It receives an address to look up; it is not told whose it is.
• Sentry (EU) — error reports, with personal data collection switched off.
• Vercel Analytics — aggregate page counts, without cookies or cross-site identifiers.

Why we are allowed to hold it

To perform the contract you entered when you created an account — without your hunt there is no service — and, for security measures like rate limiting, our legitimate interest in the service not being abused. The digest is part of the service and can be switched off in settings or by the unsubscribe link in any email.

How long

Your account and hunt are kept until you delete them. Rate-limiting rows are deleted after a day. Error reports and logs follow the retention of the services above, in the order of weeks to months.

Your rights

If the GDPR applies to you — and it does for anyone in the EU — you can ask for a copy of your data, ask for it corrected, ask for it deleted, object to processing, or complain to your data protection authority. Serbia’s Law on Personal Data Protection gives equivalent rights.

Write to support@perch.rent. We answer within 30 days, usually far sooner. Deleting your account removes your lists, flats and notes; anonymous aggregates and mail-delivery logs held by the providers above may persist for their own retention period.

Changes

We will announce material changes by email or in the app before they take effect.