Last updated: 28 July 2026
Privacy Policy
This policy explains what personal data WG Rooms in Germany processes, why we use it, and the choices available to you.
1. Who is responsible
WG Rooms in Germany is an independent project and is the controller of personal data processed through this site. For privacy questions or requests, email [email protected].
2. Data we process
Account data
If you sign in with Google, we receive and store your Google account identifier, name, email address, profile image, and the session data needed to keep you signed in. We do not receive your Google password.
Alert subscriptions
If you request room alerts or join the premium waitlist, we store your email address, selected locations and budget filters, subscription tier, confirmation status, and confirmation and unsubscribe tokens. We also record which listings were sent to avoid duplicates.
Usage and technical data
We record limited product events, such as listing views and source-link clicks, together with a listing identifier, event time, and related metadata. When you are signed in, an event may be associated with your account. Our server and service providers may also process standard request information such as IP address, browser, device, referring page, and timestamps for delivery, security, and diagnostics.
Public listing data
We process room posts made available in selected public Telegram channels and Facebook groups. We extract property details and a link to the original post. Our extraction rules are designed to remove lister names, phone numbers, email addresses, and social handles rather than publish or retain them in indexed listings.
3. Why we use data
- to provide sign-in, listings, saved preferences, and requested alerts;
- to confirm subscriptions and honour unsubscribe requests;
- to operate, secure, troubleshoot, and improve the service;
- to understand which pages and listings are useful; and
- to comply with legal obligations and respond to valid requests.
Where the GDPR applies, the legal bases are performance of a contract or steps requested by you, your consent (including for email alerts and analytics where required), our legitimate interests in running and protecting a useful listing index, and compliance with legal obligations. You may withdraw consent at any time without affecting earlier processing.
4. Analytics, cookies, and local storage
We use Google Analytics 4 to measure site usage, with advertising storage and ad personalisation disabled and IP anonymisation requested. Analytics may set or read identifiers and collect information about pages, interactions, approximate location, browser, and device. Visitors shown our cookie notice can accept analytics or opt out.
We store your analytics choice in your browser under cookie-consent so the site can remember it. Authentication also relies on essential session cookies.
Blocking essential cookies may prevent sign-in from working.
5. Service providers and sharing
We do not sell personal data. We use providers that help operate the site:
- Google for sign-in, analytics, and web fonts;
- Resend for confirmation and alert emails;
- hosting, database, and object-storage providers for site infrastructure;
- Groq for automated extraction of public listing posts; and
- Telegram and Facebook as sources and destinations for original public posts.
Providers process data under their own terms and, where applicable, on our instructions. We may also disclose information when legally required, to protect rights and safety, or as part of a reorganisation of the service.
6. International transfers
Some providers may process data outside Germany or the European Economic Area. Where required, transfers are covered by an adequacy decision, standard contractual clauses, or another lawful safeguard. You can contact us for more information about applicable safeguards.
7. Retention and security
We keep personal data only as long as needed for the purposes described above. Account data is generally kept while the account is active; subscription data is kept until you unsubscribe or request deletion; and technical, event, and delivery records are kept only as reasonably needed for operation, security, and record-keeping. Legal obligations may require longer retention in limited cases.
We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to receive data you provided in a portable format. You can also withdraw consent and lodge a complaint with your local data protection authority.
Use the link in any alert email to unsubscribe immediately. For other requests, contact us at the address above. We may need to verify your identity before completing a request.
9. Children
The service is not directed to children under 16, and we do not knowingly collect their personal data. Contact us if you believe a child has provided personal data.
10. Changes to this policy
We may update this policy when the service or legal requirements change. The latest revision date appears at the top of the page. Material changes will be highlighted where appropriate.