Privacy notice

Roomline is run by Jyosan Labs. We decide how your data is used, which makes us the controller under the GDPR. Write to jyosanlabs@gmail.com about anything in this notice.

• Your account: your name, email address and password. We store the password only in a scrambled form we can’t read. If you sign in with Google, we get your name, email address and profile picture from Google instead of a password, and keep the sign-in codes Google issues to keep you connected.
• Your mobile number, only if you choose to show it on a room. It’s never printed on a listing. Signed-in people see it only when they tap “Show contact details” on that room.
• Rooms you post: the details, description and photos. We remove location and camera data from photos when you upload them. We also keep the exact spot you pin on the map to work out walking times to stops. Nobody else sees it: maps show an area of about 250 metres instead.
• Who viewed whose contact details, and when. We use this to limit each person to 30 rooms a day, which stops people copying contact details in bulk, and to look into scams.
• Reports and decisions: what you reported and why, and what our moderators decided.
• Sign-in sessions: your IP address and browser type, to keep you signed in and to spot accounts being misused.

We use your account and rooms to provide the service you signed up for (the GDPR’s “contract” basis). We use the contact-detail log, reports and session details to keep people safe and the site secure (“legitimate interests”). We check rooms and act on reports to follow equality law and the EU Digital Services Act, and act on orders from courts and authorities when the law requires it (“legal obligation”).

You need a name and email address to create an account. To post a room you need its details, at least one photo and where it is, plus a mobile number only if you want to show it. Without these you can’t sign up or post. Everything else is up to you.

A set of wording checks reads each room’s title and description when it’s posted or edited. Wording that may break the posting rules holds the room for a person to review. A person, not the checks, decides whether to remove it.

• Anyone can see rooms that are live, with their approximate area. Your name appears only with your contact details.
• Signed-in people see the contact details you chose to show, after tapping “Show contact details”.
• Our moderators see rooms that were held or reported, and who posted them.
• Companies we pay to host the site, store photos and send emails. Contracts only let them use the data to provide that service.
• When you search for an address while posting, our server sends the text you typed to Photon, an address search service run by Komoot. It doesn’t receive your name or account.
• Map images come from OpenFreeMap. Like any website, it sees your IP address when your browser loads them.
• If you sign in with Google, Google handles that sign-in under its own privacy policy.
• The Gardaí or other authorities, when the law requires it or someone’s safety is at risk.

Some companies we use may store data outside the EU. When they do, we rely on the EU’s approved safeguards: a decision that the country protects data adequately, or the EU’s standard contract clauses. Ask us for a copy.

• Your account, name, email and mobile number: until you delete your account. If you don’t use the site for 2 years, we email you, then delete the account 30 days later unless you sign in.
• Rooms and their photos: until you delete them or your account. Rooms leave search after 4 weeks unless you renew them, but stay in My rooms until you delete them.
• Unfinished rooms: deleted after 60 days without changes.
• The record of who viewed contact details: 90 days.
• Reports and moderation decisions: until the room they’re about is deleted.
• Sign-in sessions: 7 days after you last use the site, or until you sign out.

You can ask for a copy of your data, ask us to correct or delete it, ask for your account and room details in a file you can take elsewhere, object to how we use it, or ask us to limit it. Change your name and number in Account settings, and delete your account there too: deleting it removes your rooms, photos and number straight away. For anything else, write to jyosanlabs@gmail.com. We reply within a month.

If you’re unhappy with how we handle your data, you can complain to the Data Protection Commission.

We only use cookies needed to sign you in. One keeps you signed in, for up to 7 days after your last visit. If you sign in with Google, another lasts a few minutes while Google confirms it’s you. They’re strictly necessary, which is why we don’t ask for consent. We don’t use analytics, advertising or tracking cookies.

You must be 18 or older to create an account.

When this notice changes, we update the date at the top. If a change affects how we use data you’ve already given us, we email you first.