Privacy policy — browser extension

In short

The extension collects no personal data. It has no account, no analytics, no tracking and no cookies, and it stores nothing in your browser. To calculate IMT it sends one thing from the page to flatin.pt: the asking price.

Where it works

Only on property listing pages of two sites (www.idealista.pt/imovel/… and www.imovirtual.com/pt/anuncio/…). It does not run on other pages of those sites, such as search results, or on any other site, and it has no background script. It shows the panel on sale listings only; on rental listings it shows nothing.

What it reads on the page

On a listing page it reads two things:

• The asking price.
• The name of the municipality, from the page's breadcrumb or location block. It is used to look up the IMI rate in a table that ships inside the extension, and it is not sent anywhere.

It uses nothing else from the page, and sends nothing else: not the address of the page, not its title, description, photos or the seller's details. It finds those two values in the page's own structured data and location block — which the portal also fills with the title and the description — and takes the price and the place name from there, ignoring the rest.

What it sends to flatin.pt

One request per listing page on which it finds a price, to https://flatin.pt/api/v1/imt/calculate, with the price and three fixed values that are the same for everyone: the territory (mainland Portugal), primary home (yes) and the relief for young buyers (no). The answer — IMT, stamp duty and the price of the property registration — is shown in the panel. Before it, your browser sends a check request (OPTIONS) that carries no data. Both portals are single-page websites: if the page puts another listing in front of you without reloading, the panel is rebuilt and the request is made again for the new price.

Nothing else is sent: not the address of the listing, not its identifier, not the municipality. The request is made without a referrer, so the address of the page is not passed in the Referer header either.

At installation Firefox says that the extension shares website content: that content is this price.

What your browser adds

Like any request on the internet, it reaches us with your IP address and your browser's identification string. The browser also names the site the request comes from (the Origin header, for example https://www.idealista.pt) — the portal, without the path to the listing.

What we keep

The application calculates the answer and does not save the price or the result. Our server logs record, as for any visit to flatin.pt, the IP address, the time, the address requested and the browser; they are kept for 30 days to run the service, investigate incidents and limit abusive request rates, and are then deleted. The request passes through the hosting and network providers named in the privacy policy. The extension adds no account, cookie or identifier that would link these records to you.

What it stores in your browser

Nothing. It does not use extension storage, page storage or cookies. Closing the panel or the tab leaves nothing behind.

Permissions

The extension asks for access to the listing pages of the two sites above and nothing more: no other sites, no tabs, no browsing history, no cookies.

Who is responsible

The controller is HOLY CHAOS, UNIPESSOAL LDA (NIF 519403908, Porto, Portugal). Contact: info@flatin.pt.

Your rights, how to exercise them and how to complain to the supervisory authority (CNPD) are set out in the privacy policy and on the «Your data» page.