Last updated 2026-11-01.
This is the legally-binding privacy policy. The user-facing description of the same architecture (with diagrams) lives at /how-our-analyzer-works. If the two ever conflict, that page describes the code; this page is the legal contract.
What we capture
- Server access logs. Standard nginx logs (URL path, timestamp, IP address, user-agent). Rotated and purged on a 30-day rolling window unless required for security-incident investigation.
- Page-view analytics. We use Google Analytics 4 to understand which pages are visited. Whether it may use cookies depends on your region (see Cookies below). No content from your paste is captured.
What we never capture
- Your lease text.v1 has no server endpoint that receives lease content. The analyzer runs entirely in your browser. You can verify this by opening your browser's Network tab — no fetch fires when you paste text.
- Tenant or landlord names, addresses, phones, emails. The redaction pipeline strips these locally before any pattern match runs. The redaction patterns are documented at /how-our-analyzer-works.
- Cross-site identifiers.We don't set cross-site cookies. We don't share data with property managers, tenant-screening platforms, or marketing networks. We don't fingerprint.
Redaction patterns
The regex patterns the browser applies before any classification:
tenant_name ← (Tenant|Lessee|Resident)(?: Name)?\s*[:\-]\s*(name)
landlord_name ← (Landlord|Lessor|Owner|Property Manager|Management Company)\s*[:\-]\s*(name)
property_addr ← multi-line block: <house#> <street> ... <STATE> <ZIP>
phone ← (\d{3})\s*[-.\s]?\d{3}[-.\s]?\d{4}
email ← [A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}
ssn (safety) ← \d{3}-\d{2}-\d{4}Future Pattern F tier
When the AI extraction tier ships, the same redaction pipeline runs first; only redacted text leaves the browser. Server-side request logs for the AI tier capture only site_id, request_class, success_bool, and timestamp. Request and response bodies are NULL — never logged. The kill switch (/monitor/ai-tenants pause toggle) returns 403 at the Central middleware instantly if the contract is ever broken.
Cookies
There is no cookie banner and no consent pop-up. Before Google Analytics loads, each page sets Google Consent Mode defaults by region. In the European Economic Area, the United Kingdom, and Switzerland, analytics and advertising storage are denied by default, so Google Analytics runs without analytics cookies and may send limited cookieless measurements. In all other regions, including the United States, analytics and advertising storage are granted by default, so Google Analytics may set its cookies (_ga, _ga_*). The analyzer itself sets no cookies and stores nothing in your browser. The site shows no ads and loads no advertising scripts in any region.
Your rights
Because we don't collect personal data from your lease, the usual data-subject rights (access, deletion, portability) are not relevant to your analyzer use. For server access logs (URL + timestamp + IP), information or deletion requests cannot be sent yet: there is no contact email for this site. The about page will list one when it exists.
Delivery network (Cloudflare)
The site is delivered through the network of Cloudflare, Inc. (USA). In doing so, Cloudflare processes the connection data each request needs, including your IP address. For delivery (CDN), security and bot protection, Cloudflare acts as our processor (Art. 28 GDPR) under its data processing addendum (Cloudflare Customer DPA). Transfers to the US rely on the EU-U.S. Data Privacy Framework, in which Cloudflare participates; where it does not apply, the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) apply.
Operator
Operated by Desymphony EOOD (Bulgaria), UIC 208083785, the data controller. This privacy policy applies only to the LeaseRedFlag site. Pages that link off-site (state legislature, attorney referrals, primary sources) operate under their own policies; we don't control them.