Privacy policy

The site is run by a private individual in Lithuania. For any data-related question: [email protected] — we reply within one month, and disclose the controller's identity on request.

The site runs on a self-hosted server in Lithuania. Requests are proxied by Cloudflare (CDN and protection).

We set no cookies, use no Google Analytics, and do no advertising or cross-site tracking. We build no profiles, make no automated decisions about people, and never sell or share data.

We use Cloudflare Web Analytics. It works without cookies and without identifying you across sites: Cloudflare receives the page address you opened, where you came from (referrer), browser and operating-system type, country, and page performance metrics. That tells us how many people visit and how fast the page loads — not who you are.

We also count visits on our own server (see below), because ad blockers often block analytics scripts and we need to know actual usage. The legal basis for both is legitimate interest (GDPR Art. 6(1)(f)).

• Interest signal ("I'd use this"): we neither ask for nor accept an email or any other contact detail — the button stores only a salted, irreversible SHA-256 hash of your IP address so one person counts once. The IP itself is never stored.
• Visit counts: date, page path, whether the request came from a bot, and a counter. No IP, no identifiers — aggregate numbers from which no individual can be derived.
• Address search: the text you type is sent to the OpenStreetMap Nominatim service, which returns coordinates. We do not store the search text.
• Auction photos are loaded directly from eaukcionai.lt. That server therefore sees your IP address and browser details, as with any site showing an external image.

Legal basis: the IP hash and aggregate counters rest on legitimate interest (GDPR Art. 6(1)(f)) — abuse prevention and knowing whether the site is used. We ask for no consent because there is nothing to consent to: no contact details are collected.

• IP hash: 12 months.
• Aggregate visit counters: indefinitely (they contain no personal data).

You may access, correct or erase your data, restrict processing and object to it. Write to [email protected] — we answer within one month. Note that a hash cannot identify you, so an erasure request needs the IP address you used.

If you believe the processing is unlawful, you may complain to the Lithuanian State Data Protection Inspectorate (ada.lt).

• Cloudflare, Inc. — CDN, DNS, protection and site analytics (Web Analytics); processes request metadata (including IP) under its own privacy policy and EU standard contractual clauses.
• OpenStreetMap Foundation (Nominatim) — address search.
• eaukcionai.lt — source of auction photos.
• The database and application run on our own server; no data is stored in third-party services.