Privacy

Last updated July 26, 2026 · Pending counsel review

The public address check

What happens to the address you enter

  • We do not store it. Not the raw address, not a normalized version, not a hash of it. No table that holds a public submission has an address column.
  • It travels in the request body, never in a URL, so it does not appear in your browser history, in a referrer header, or in an access log.
  • It is sent to public data providers in order to answer your question. Checking an address means looking it up, and that lookup goes to U.S. federal public-domain services: the U.S. Census Geocoder to resolve the address, USGS 3DEP for elevation-data coverage, and USDA NAIP for aerial-imagery availability. No account or identifier of ours accompanies the request, and no commercial data broker is involved.
  • A normalized copy stays in server memory for up to six hours so that checking the same address twice does not repeat the lookup. It is never written to disk.

What we store, and only with your consent

  • Your email address — only if you tick the early-access box. It is never pre-ticked, and the exact wording you agreed to is recorded with it.
  • Your answers to the optional questions — what brought you here, how many quotes you have received, and what makes them hard to compare. They appear after your result, and skipping them changes nothing about the answer you get.
  • The readiness state you saw, as a single label, so we know how the list breaks down. It identifies no property.
  • A coarse region at most — a state, or a state plus a three-character prefix. A full postcode is rejected, not shortened.
  • Which advertisement you arrived from, as a short campaign label.

What we never collect

  • Your phone number. There is no field for one, so there is nothing to call or text.
  • Your IP address. Rate limiting uses a salted, rotating hash of your network prefix; the address itself is never stored or logged.
  • Any analytics or tracking script. There are none on this site.
  • Any device fingerprint.
  • Any roof measurement, geometry or imagery. The public check never computes one.

Four separate permissions

Running a check is not consent to anything else, and these are kept apart in the software, not only in this policy:

  • Checking an address does not add you to any list.
  • Joining the early-access list is a separate, explicit tick.
  • Being introduced to a contractor is not something we do. No lead is created, shared, routed or sold — there is no such feature.
  • Phone or SMS contact is not possible, because no phone number is collected.

How long we keep it

  • Early-access email and consent: 730 days.
  • Answers to the optional questions: 365 days — deliberately shorter than the permission to contact you.
  • Your session cookie: 15 minutes, 30 at the outside.

Deleting your data

Ask via Contact and we delete it outright — the record is removed, along with any answers given in the same session. It is not merely marked hidden. You do not need to tell us which address you checked, because we never had it.

The result card

The summary you can download is built in your browser and never uploaded. By default it carries no part of your address; if you choose to add a label, only a street without a house number is permitted. There is no public share link, so there is no link to leak.

The private pilot

Invited pilot users run full measurements, which is a different activity with different data. There we do process the property address and the resulting measurement, in order to produce the report that was requested. Pilot sign-in uses a signed, HttpOnly cookie that expires within 8 hours, and signing out revokes it immediately. Access codes are stored only as a one-way hash. Addresses are redacted from operational logs — we log city, state and ZIP context, never the full street line.

What we never do, on either surface

  • We do not sell your information.
  • We do not share it with any third party beyond the public data lookups described above.
  • We do not put addresses, codes or tokens in page URLs.
  • We do not use pre-ticked consent boxes.

This page describes what the software actually does, in plain language, and is written to be checkable against it. It has not yet been reviewed by counsel; a reviewed policy will replace it.