Privacy

What we hold about users

• Your email address, to send you sign-in links. It is never shown to anyone and never shared.
• A random handle like "steady-heron-412", generated when you first sign in. This is your only public identity.
• The prices you add: business, job, amount, date, and the two yes/no questions.
• A hashed form of your IP address on each submission, used only to detect abuse. The hash cannot be reversed into the address.
• A session cookie so you stay signed in. No analytics cookies, no advertising trackers.

Legal basis: performance of the service you asked for (sign-in, your entries) and our legitimate interest in keeping the record honest (abuse detection).

What we hold about businesses

Business name, town, country, trade, and optionally a website, as entered by users, together with the prices users report having paid. Where a business is a sole trader, its name is personal data. We process it on the basis of legitimate interest: consumer protection and price transparency are matters of public interest, and in many countries, including Portugal, displaying service prices is already a legal duty.

We keep this data minimal on purpose. No phone numbers, no street addresses, no names of staff, no opinions. Descriptions are checked before publication so they state what work was done and nothing about the person who did it.

Rights of business owners

You can ask to see, correct or object to data about you, reply publicly to any entry, or ask for removal. Use the report form. A person reads every request and answers within seven days with the decision and the reason. Entries that break our guidelines are removed. Factual price reports are usually kept, with your reply shown beside them, because the public interest in price transparency is the reason the site exists.

Rights of users

You can see everything you have added on your account page. To correct or delete an entry, or to delete your account and everything with it, email tbpdenmark@gmail.com from the address you signed in with. Deletion is complete within 30 days.

Sharing and processors

• Hosting: a server in the European Union.
• Email: Resend, for sign-in links only.
• Text check: the description you type, and nothing else about you, is sent to Anthropic's API to decide whether it describes work or passes judgment. No account data goes with it.

We do not sell data, run advertising, or share data with listed businesses beyond what is public on the site.

Retention

Approved entries stay as long as they are useful; prices older than five years are not accepted and old entries are reviewed for removal. Rejected entries are deleted after 90 days. Sign-in tokens expire in 24 hours. Report correspondence is kept for two years as a record of how notices were handled.

Complaints

If you are unhappy with how we handled your data, you can complain to your national data protection authority. In Portugal that is the CNPD.