Privacy policy

Version 2026-08-10

Cuckoo checks whether your property is listed on short-term rental platforms without your knowledge. To do that we process a small amount of personal data: your address, a few property details, and your email address. This page explains what we store, why, for how long, and your rights.

The short version: we use your data only for the scan you ask for. We do not sell it, we show no ads, and you only get marketing email if you tick the box that asks for it.

Who is responsible

Cuckoo is operated by SWYER bv (Belgium), the controller for the processing described on this page.

For anything about your data, email us at privacy@cuckoo.rent.

What we do with your data

Every purpose has its own legal basis under the GDPR. We collect nothing a purpose does not need.

Running your scan

Your address, the pin you confirm, the property details you enter (type, bedrooms, floor) and your email address are the inputs of the scan you request. We process them to run that scan and show you the results. Legal basis: performance of a contract — the scan you asked for (art. 6.1.b GDPR).

Emails that are part of the service

We email you a confirmation link to start the scan, and the results once the scan finishes. Those messages contain no advertising. Legal basis: performance of a contract (art. 6.1.b GDPR).

Understanding website traffic

We count page views, page and referrer paths, campaign tags and technical browser data such as browser, operating system and device type, viewport size and timezone to understand which pages and campaigns work and to improve the service. We do not record sessions, clicks, form contents, addresses or email addresses, and we create no persistent visitor profile. Legal basis: our legitimate interest in measuring and improving the service (art. 6.1.f GDPR).

Keeping the service safe

We limit the number of requests and briefly keep the IP address a request came from, to stop abuse of the free scan. IP addresses are deleted after 30 days at the latest. Legal basis: our legitimate interest in preventing abuse (art. 6.1.f GDPR).

Tips and offers — only if you opt in

Only if you tick the optional box in the scan form do we send you an occasional email with tips and offers from Cuckoo about protecting your property. Every such email has a one-click unsubscribe, and unsubscribing never affects your scan. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time.

Proving your choices

We record when you submitted the form, which version of this policy you were shown, whether the opt-in box was ticked, your language, and when you clicked the confirmation link. The law requires us to be able to demonstrate the choices you made (art. 7.1 GDPR).

Data about listings

The scan only looks at publicly visible listing pages on Airbnb and Booking.com around your pin — the same pages any visitor can open. We store the listing facts we show you (platform, link, title, distance to your pin); listing photos stay on the platform, we only link to them.

Where your data lives

We work with a small set of service providers. Each is bound by a data-processing agreement, except Google, which acts as an independent controller.

  • Convex — our database and backend, hosted in the EU (Ireland). Some of Convex’s supporting tooling (support, monitoring, billing) runs in the United States under the EU standard contractual clauses.
  • Resend — sends our emails from the EU (Ireland). Resend stores account data, email metadata and logs in the United States, under the EU standard contractual clauses and the EU-US Data Privacy Framework.
  • Vercel — hosts this website.
  • PostHog — provides cookieless web analytics from its EU Cloud (Frankfurt). It receives minimized page-view and technical data only. PostHog discards the client IP address after deriving a temporary, privacy-preserving daily identifier; we create no identified person profiles.
  • Crisp — powers the live chat you can open from our footer. The chat loads only when you open it — until then nothing of Crisp runs on this site. Once you open it, Crisp processes your messages and technical data such as your IP address as our processor, under a data-processing agreement. Crisp is a French company and keeps chat data in the EU (Amsterdam).
  • Google Maps Platform — powers the address search and the map. While you type your address, your keystrokes go to our own servers, which query Google — Google does not see your IP address at that step. The map on the pin-confirmation step does load directly from Google; Google then receives technical data such as your IP address and the map area shown, as an independent controller under its own privacy policy. As verified on 30 July 2026, the map sets no cookies and stores nothing on your device.

Where data leaves the EU, it travels under the European Commission’s standard contractual clauses (SCCs) or an adequacy framework. Copies of the safeguards are available via the providers’ data-processing agreements linked above, or from us on request.

How long we keep it

  • You never click the confirmation link? Everything you entered is deleted within 30 days.
  • IP addresses: deleted within 30 days.
  • Your scan and results: deleted no later than 12 months after your scan completes, unless you take up further services or ask us to delete sooner.
  • The record of your choices: kept while your opt-in stands, and afterwards only as long as needed to prove we handled them correctly.
  • Cookieless page-view data: kept only while needed to compare traffic trends, with its continued need reviewed at least once a year.

Your rights

You can ask us at any time to:

  • show you the data we hold about you, with a copy;
  • correct it;
  • delete it;
  • restrict the processing, or object to it;
  • hand it over in a portable format.
Marketing has its own absolute right: object once and it stops. Every marketing email has a one-click unsubscribe that does exactly that.

Where we rely on your consent, you can withdraw it at any time; that does not undo what lawfully happened before.

To exercise any of these rights, email privacy@cuckoo.rent.

You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels. gegevensbeschermingsautoriteit.be

Cookies

This site uses no advertising or tracking cookies. Our web analytics is permanently cookieless — which is why you see no cookie banner here.

  • A sign-in cookie, set when you open your results via the link in your inbox, keeps you signed in. Strictly necessary.
  • A language cookie remembers your language choice. Strictly necessary.
  • PostHog counts page views without writing anything to cookies, local storage or session storage.
  • The live chat sets cookies only after you open it, to keep your conversation together. Strictly necessary — if you never open the chat, it places nothing.
  • The Google map sets no cookies (verified on 30 July 2026; we re-check when Google ships updates).

Automated decisions

The scan matches listings to your address automatically, but no decision with legal or similarly significant effects is made about you — and in the current version, a person reviews every result before it goes out to you.

What you have to provide

The address is what we scan around; the email address is where the results go and how you sign in. Without those two we cannot deliver the scan. The property details (type, bedrooms, floor) sharpen the result.

Changes to this policy

This policy is versioned. The version you were shown when you requested a scan is stored with your request. Meaningful changes will be announced on this page.