Privacy

What this site stores

• No IP addresses. The site's own code does not write IP addresses to its database or files. To enforce rate limits it keeps a short-lived counter per IP address in server memory only; idle entries are discarded after 10 to 15 minutes and are never saved.
• Daily counters. For each day the site counts requests by type of page and by a broad client category derived from the browser's User-Agent header (for example "humans", a named search-engine crawler, or "other bots"). These are totals only.
• Automated clients. For requests from crawlers, AI agents and other non-browser clients (as identified by the User-Agent), the site keeps the time, client category, request type, the page path without its query string, and the User-Agent string (up to 200 characters) for 14 days. Requests from ordinary web browsers are only counted, not logged this way.
• Failed requests. For requests that fail or time out, the site keeps a diagnostic record for 14 days with the time, a random request ID, the type of page (not its address), status code, error category, duration, cache status and client category. For address lookups it records only whether the lookup matched and whether a house number and borough or ZIP were given, not the address itself.
• Search text. Addresses typed into search or sent to the API or MCP server are used to answer the request and are not saved in the site's database.
• Server logs. When a request fails with an unexpected error, the error message written to the hosting provider's server log can include the requested URL (for a search, that includes the search text) or the failed request's details.

Cookies

The site's own pages set no cookies and use no browser local storage. The hosting infrastructure may set a technical cookie used for routing requests; this site does not use it to identify or track visitors.

Third parties

• Hosting: Replit. The site runs on Replit (on Google Cloud infrastructure), which receives every request, including your IP address and browser information, and may keep standard request logs under the Replit privacy policy.
• Website analytics from Replit. Pages load Replit's analytics script, which records page views (such as the page address, the referring page, and general browser and device information) for the site's owner. The site adds a few anonymous events about address searches (for example "matched" or "not found"); these never include the address typed, the property page, or the search text.
• Data. Property facts come from NYC Open Data. Your visits are not shared with the City of New York.

Owner names and public records

Property pages show names and other details as they appear in public city records (for example owner names in tax and deed records, or registered managing agents). To correct or remove a record, see Contact & corrections.