StabilizedNYC

Last updated: May 28, 2026 · Version 0.3

StabilizedNYC is operated by Hakko Labs LLC. This policy describes what we collect, what we don't, what third parties may collect on our pages, and how to reach us.

What we collect

You can use StabilizedNYC's core lookup with no account at all. We collect personal information only when you choose to sign in.

Without an account

• Addresses and BBLs you look up are sent to our verdict service and to NYC Open Data sources to compute a result. We cache the result keyed by the building's BBL — not by you — so repeated lookups of the same building are faster for everyone.
• Server logs may briefly retain IP addresses and request paths for security, abuse prevention, and debugging. These logs are kept by Google Cloud / Firebase and are not used to build a profile of you.
• First-party event logs. When you load a page, click a major button, or follow a recommended action link, your browser sends a small POST to our own /api/track endpoint with the event name and a few non-identifying properties (e.g., "page_view", "cta_clicked save"). These events are written to our own Cloud Logging instance in Google Cloud and aren't shared with anyone. We use them to understand which buildings get looked up, which referral links convert, and where the product fails. They do not set cookies and do not include any personal identifier.
• Third-party traffic analytics. We use a third-party analytics provider to measure aggregate traffic — page views, traffic sources, rough geographic region. Their script sets cookies in the _ga family (see Cookies below) and sends data to the provider, who may use it subject to their own privacy terms.
• We do not sell your data. Ads served on the site (see "Advertising" below) and third-party analytics events are subject to the third-party cookies and identifiers their providers use.

If you create an account (email link sign-in)

• Your email address — used to send you a one-tap sign-in link and to associate your saved buildings with your account. Provided by Firebase Authentication.
• Saved buildings — when you click "Save this building" we store the building's BBL and a short summary (label, verdict, confidence) under your account in Firestore. Only you can read or modify your saved buildings (enforced via Firestore security rules).
• We do not ask for or store your name, address, phone, or any other identifier. Account-level data is intentionally minimal.
• You can sign out at any time and request deletion of your account and saved buildings by emailing us.

Cookies

We do not set our own tracking cookies. Cookies that may be set on our pages by third parties:

• Firebase Hosting may set a small number of cookies for HTTP routing and TLS session resumption. These don't identify you.
• Google AdSense may set cookies such as __gads, __gpi, and NID in order to serve ads, measure performance, and prevent ad fraud. See the Advertising section below for opt-out options.
• Our third-party analytics provider sets cookies in the _ga family to distinguish unique browsers and sessions for traffic measurement.

Third-party services

• NYC Planning GeoSearch and NYC Open Data (Socrata). Public, free, no key. Your queries reach these services from our servers.
• Google Maps Street View Static API. The address you look up resolves to a latitude/longitude that the browser sends to Google Maps to retrieve the building's Street View image. Google receives that lat/lng and a Referer header for our domain. Their privacy practices are governed by Google's privacy policy.
• Google AdSense. Some pages display ads served by Google AdSense (see Advertising below).
• Third-party analytics. A third-party analytics script loads on every page to measure aggregate traffic (page views, traffic sources, rough region). Sets _ga cookies; data is governed by the provider's privacy policy.
• JustFix. Our stabilized-buildings list is derived from JustFix's open dataset of DOF tax-bill unit counts. Their data is downloaded by us once per refresh; your individual queries do not reach JustFix.

Advertising

StabilizedNYC may display ads served by Google AdSense. Google and its advertising partners may use cookies, web beacons, and device identifiers to:

• Serve ads based on your prior visits to this site or other sites you've visited;
• Measure ad performance, viewability, and reach; and
• Prevent ad fraud and abuse.

These third-party cookies and identifiers are governed by Google's Privacy & Terms. You can manage or opt out of personalized advertising at any time through:

• Google Ad Settings — controls personalization across Google's products.
• aboutads.info (US) and youronlinechoices.eu (EU) — industry opt-outs for personalized advertising from multiple ad networks.

We do not directly receive your personal data from these cookies, and we do not sell your data to advertisers. Ad revenue helps us keep StabilizedNYC free for tenants. We block ad categories that conflict with the tenant focus of the site (for example, landlord-services categories) where AdSense permits.

If you email us

Reports about incorrect data, takedown requests, or other contact via contact@stabilized.nyc reach a personal mailbox. We retain those emails as needed to respond and to track corrections to upstream data.

Your rights

Even with no account, you can email contact@stabilized.nyc to ask whether we hold anything about you, and to request deletion. Because we don't link queries to identity, the most we usually hold is logs tied to an IP address, which we can remove on request to the extent they still exist.

Children

The Service isn't directed at children under 13 and we don't knowingly collect their data.

Contact

Hakko Labs LLC · attn: StabilizedNYC Privacy
contact@stabilized.nyc