Privacy policy | RohiniPG

1. What we collect

When you register: your name, email address, mobile number, password (stored only as a bcrypt hash — we never see or store the password itself), and optionally your gender, city, a short bio and a profile photo.

When you list a PG: the property details, address, photographs and the contact name, phone and email you choose to publish on the listing. This information is public by design.

When you send an enquiry: your name, email, phone, and any move-in date, budget and message you provide. This is shared with the owner of that listing — that is the point of it.

Automatically: your IP address and browser user-agent against sign-in attempts, enquiries and audit-log entries; a per-day record that an IP viewed a listing, used for view counts; and cookies as described below.

2. Why we use it

To run your account, sign you in and keep you signed in.
To publish listings and pass enquiries to the right owner.
To show owners how many people viewed and enquired about their listings.
To moderate listings and reviews, and to investigate reports of fraud or abuse.
To rate-limit sign-in attempts and enquiries, which is how we keep spam and brute-force attempts down.
To send transactional email: email verification, password resets, enquiry notifications and listing status updates.

3. What is public

Your listing details and the contact name, phone and email on a listing are visible to anyone. A review shows your display name and profile photo. Your email address, mobile number and account details are not shown publicly unless you put them on a listing yourself.

4. Who we share with

Enquiry details go to the owner of the listing you enquired about. Beyond that, we do not sell or rent personal data. We may disclose information where the law requires it, or where it is necessary to investigate fraud or protect someone's safety.

Depending on how this site is configured by its operator, email may be delivered through a third-party SMTP provider, and analytics may be enabled. Those providers process data on the operator's behalf.

5. Cookies

rpgsid — your session, so you stay signed in. Essential.
rpg_remember — set only if you tick "keep me signed in". Lasts 30 days and is cleared when you sign out.
rpg_theme — remembers whether you chose light or dark. Cosmetic.

We do not use advertising or cross-site tracking cookies.

6. How long we keep it

Account data is kept while your account exists. Sign-in attempt records and view records are operational data and can be purged periodically. Enquiries and reviews are kept as part of the listing history unless the associated account is deleted.

7. Your choices

Edit your name, phone, gender, city, bio and photo from your profile page at any time.
Change your password, which also signs out every other device.
Delete your account from the profile page. This permanently removes your account, listings, uploaded photos, reviews, shortlist and saved searches. It cannot be undone.
Ask us for a copy of your data, or to correct it, by writing to the address below.

8. Security

Passwords are hashed with bcrypt. Database access uses prepared statements. Forms are protected against cross-site request forgery, sessions are rotated on sign-in, uploads are re-encoded on the server, and repeated failed sign-ins are throttled. No system is perfectly secure, so please use a password you do not reuse elsewhere.

9. Children

The site is not intended for anyone under 18 and we do not knowingly collect their data.

10. Contact

Privacy questions or requests: silversys@gmail.com, 09811770005, or 156/b5 sector 7 rohini.