Privacy policy

• You can browse deals without an account. We collect usage analytics and session replays while you do.
• If you analyze an address, we keep the address and result, plus a one-way hash of your IP address.
• An account needs your name, email and a password. We use the email for sign-in and the daily digest.
• We don't sell your personal information and we don't run ads.
• Email hello@stryield.com to see, correct or delete your data.

Analytics. We use PostHog to understand how the site is used: pages viewed, clicks and similar interactions, device and browser details, and errors that happen in your browser. We also record a few named events: signing up, signing out, finishing an address analysis (without the address), and reaching the free analysis limit. PostHog's script stores a random identifier in your browser so visits can be counted together.

Session replay. PostHog also records replays of visits: how the page looked and how it was used (mouse movement, clicks, scrolling), along with browser console messages and page-load timing. What you type into form fields, including addresses and passwords, is masked in these recordings. We use replays to find bugs and confusing parts of the site.

Hosting. The site runs on Cloudflare, which handles every request, including your IP address, to serve the page. We keep request logs from our server code to find bugs.

• What you enter. We store the address and the bedrooms and bathrooms you give, together with the result.
• A hash of your IP address. We store a one-way hash of your IP address made with a secret key, never the raw address. With the visitor cookie below, it counts your free analyses and rate-limits the property lookup.
• A visitor cookie. The sy_vid cookie holds a random ID for 1 year so we can count free analyses. If you later sign in on the same browser, analyses you ran while signed out are linked to your account.
• A shareable result page. Each analysis gets its own page. Anyone with the link can open it, and we ask search engines not to index these pages.
• Paused analyses. If you reach the free limit and sign up, your browser's local storage keeps what you entered for up to 7 days so the analysis can resume after you confirm your email.
• Data providers. To run the analysis we send the address, bedrooms and bathrooms (never your name, email or IP address) to our property and short-term rental market data providers. If you type an address instead of picking a suggestion, we also send it to the US Census Bureau's geocoder. We keep copies of the providers' responses so we don't have to request the same address again.

Address suggestions. As you type in an address box, your browser sends the text to Google's Places service to suggest addresses. That request goes straight from your browser to Google, so Google receives the text and your IP address under its own privacy policy.

Bot checks. Address analyses, the cost segregation calculator's property lookup and sign-up use Cloudflare Turnstile, which loads from Cloudflare. To verify a check we send Cloudflare the check token and your IP address.

• Account details. Your name, email and password. The password is stored as a hash, not as text. You must confirm your email before you can sign in.
• Sessions. A sign-in cookie keeps you signed in. The session record can include the IP address and browser (user agent) you signed in from.
• Preferences. Your markets, price and bedroom filters, minimum cash-on-cash, tax bracket, management choice, whether to count tax savings in returns, and whether you get the daily digest.
• Analytics identity. When you sign up, and on pages you view while signed in, we send PostHog your account ID, name and email so your visits are tied to your account.
• Email records. A record of each daily digest we send you.

• sy_vid: counts free analyses. Set by us, 1 year.
• Sign-in session cookie: keeps you signed in. Set by us, only when you sign in.
• PostHog identifier: analytics, stored by PostHog's script in your browser.
• Paused analysis (local storage): only if you hit the free limit, up to 7 days.

We don't use advertising or ad-retargeting cookies.

We send email through Resend. When you sign up you get a welcome email with a link to confirm your address, and a confirm-only email if you need the link again. The welcome email invites you to reply with feedback, and replies come to us.

New accounts are signed up for the daily deal digest. Once your email is confirmed, we send it at 12:30 UTC on days with new deals that match your preferences. Every digest has an unsubscribe link that turns it off in one click, and you can also switch it off on your settings page.

• Cloudflare: hosting, our database and file storage, request logs, and Turnstile bot checks.
• PostHog: product analytics, session replay and error tracking.
• Resend: sending email.
• Google: address suggestions, requested by your browser.
• Property and short-term rental market data providers: receive the addresses you analyze, with no personal details.
• US Census Bureau geocoder: receives typed addresses to find them.

Listing photos, comparable-rental thumbnails and placeholder images load straight from third-party image servers, so those servers see your IP address when your browser fetches an image. Links to listing and booking sites take you to sites with their own privacy policies.

We don't sell your personal information, and we don't share it for advertising. We use it to run the site, count usage limits, send the emails described above, and understand how the site is used.

We haven't set automatic deletion periods. Account data stays until you ask us to delete it. Address analyses and cached data-provider responses are kept so repeat lookups don't need new requests.

• See, correct or delete your data. Email hello@stryield.com from the address on your account. There's no self-serve delete button yet, so we handle these requests by hand.
• Stop the digest. Use the unsubscribe link in any digest or the setting on your settings page.
• Cookies. You can block or clear cookies in your browser. Signing in needs the session cookie, and clearing the visitor cookie doesn't reset the free analysis count, which also uses the IP hash.

If we change this policy, we'll update this page and its effective date. Questions: hello@stryield.com, or see the contact page. The terms of use cover the rest of how the site works.