Privacy Policy

What we collect

An anonymous visitor ID — a random cookie (br_v, kept ~1 year) that remembers your free-question usage and which membership offer you were shown, so pricing stays consistent for you. It contains no personal information.

Membership details — when you start checkout, we use the email you enter to attach the account, prevent duplicate subscriptions, and recover an interrupted checkout. Stripe returns the subscription status after checkout. Your card is entered on Stripe's pages and handled entirely by Stripe; we never see or store card numbers.

Your questions — questions you ask the analyst are processed by OpenRouter to produce an answer, counted against fair-use limits, and may be retained in operational chat records tied to the anonymous visitor ID so we can debug failures and improve the service. Curated answers and exact repeated conversations may be cached without a link to who asked; exact-conversation cache keys are one-way digests rather than question text, and individual-owner reveals are excluded. Question text is not sent to our analytics services.

An email address — only if you choose to give us one (e.g. report updates).

Server logs — standard operational logs (IP, path, timestamp), kept briefly for security and debugging.

Product analytics

We use Google Analytics 4 and a self-hosted installation of Umami to understand which public pages and product actions are useful and where the experience fails. They receive page views and controlled interaction data such as the action source, report scope, and conversation turn—not the text of your question, your checkout email, or the contents of an AI answer.

These services may process ordinary browser, device, network, and route information as part of page measurement. A property-report route can contain a public street address. BlockReport’s br_v visitor ID is used for product limits and offer consistency; we do not intentionally send that cookie value to GA4 or Umami.

What we do NOT do

We do not sell or rent personal information, run cross-site advertising trackers, or use your questions for ad targeting. We do use the product analytics described above and share data with the processors needed to operate BlockReport. The property data itself is public record published by the City of Philadelphia; it is not information collected from the visitor reading it.

Processors we rely on

Stripe (payments), Cloudflare (network), OpenRouter (relays your questions to an AI model to generate answers), Google (GA4 analytics, street imagery, and server-side places lookups), a self-hosted Umami installation (product analytics), and the City of Philadelphia / US Census open-data APIs (record queries are normally made by our server, not your browser).

Your choices

Clear your cookies and the visitor ID is gone. Want your membership record or lead email deleted? Write to [email protected] and we'll delete it (Stripe retains what payment law requires).

BlockReport is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes, the effective date below moves. Material changes will be noted on the site.