Privacy policy

Who processes your data

The data controller is esti.ma, an independent project published from Morocco. For any question about your data, write to support@esti.ma: it is the only address, and a person reads it.

What we store

Here is everything the database holds about you. Nothing else.

Your account. Username, email address, password, creation date and last login date. The password is never stored as such — only an irreversible cryptographic hash. We cannot read it back, only reset it.

Your profile, if you fill it in. Full name, phone number, default city, language and theme. These five fields are optional: they pre-fill your forms and nothing else. You can clear them at any time from your profile.

What you set aside. Your favourites — the listings you mark — and your alerts, that is, the search criteria you choose to keep. They belong to your account, are visible to you alone, and can be deleted one by one.

The date of your valuations. The criteria you submit to the valuation form are not kept: they produce your result, then are discarded. We record only the date of each valuation, to enforce the daily quota — not what it was about.

Your messages. If you write through the contact form, your name, email address, subject and message are stored, then read in the administration area. Without that, a message would be a message nobody can answer.

Your listings, if you post any. The text, price, features, city and district of the property, the photos, and the phone number you choose to attach. Photos are re-encoded on upload: their metadata, including the GPS position where they were taken, is removed. A published listing is public: every visitor sees it and search engines index it. A private seller is never named on it — only the year they joined is shown; a verified professional is, under their company name. We also keep the history of status and price changes, the valuations computed for the listing, and its view count, which is counted without keeping who viewed it.

Your phone number appears on no page: a visitor has to click to display it. Each display is counted, and linked to the visitor's account or, without an account, to a daily fingerprint derived from their address — never the address itself — to limit number harvesting.

Messaging. Messages exchanged about a listing are stored and visible to both participants, who see each other under their usernames. An administrator reads a conversation only if one of them has reported it. Blocks and reports are stored. An email tells you about a new message; you can turn this off in your profile.

The “write to the advertiser” form. The name, email address, optional phone number and message you enter are sent by email to the listing's author, who can reply to you directly. We do not keep the message, only a record that contact took place.

Reports. The reason, the optional comment, and the reporter's account or, without an account, a daily fingerprint of their address.

The professional account, if you apply. Company name, business, ICE, trade register number, city, address, phone, website, description, logo and proof document. The ICE, trade register number, phone and proof document are never published: only the administrator reviewing the application can see them. The public page shows the company name, business, city, address, website, description and logo.

Technical logs. IP address, timestamp and requested page, kept to detect abuse and failures.

Audience measurement

The site uses Google Analytics 4 to count visits and see which pages are read. The service is provided by Google Ireland Limited, which receives your IP address — truncated before storage —, the page requested, the page you came from, and your device and browser type. It sets two measurement cookies for this, lasting no more than two years.

We read those figures in aggregate: how many people saw a page, and where they came from. They are tied to no esti.ma account. The legal basis is our legitimate interest in knowing whether the service is used, and you may object to it — Google's official opt-out extension, or blocking third-party cookies in your browser, is enough.

What we do not collect

No advertising trackers. No social media buttons. No outside ad network. We do not sell, rent or trade any data, and the measurement above is never cross- referenced with your account.

The site shows its own in-house ad slots, served from our servers and never by an outside ad network. Their impressions and clicks are counted per slot, in aggregate: those counters belong to no account and identify nobody.

The listings in the ranking and on the price pages come from public sources and do not concern you personally. Listings posted by members on esti.ma are described above.

Why, and on what basis

Processing	Purpose	Legal basis
Account and profile	Give you access to the service	Contract performance
Favourites and alerts	Find again what you set aside	Contract performance
Valuation dates	Enforce the daily quota	Legitimate interest
Contact messages	Answer you	Your own request
Posted listings and photos	Publish your listing	Contract performance
Listing valuation and checks	Place the price, keep out fraudulent listings	Legitimate interest
Messaging and “write to the advertiser” form	Put buyers and advertisers in touch	Contract performance
Phone number displays, reports	Limit number harvesting and abuse	Legitimate interest
Professional account	Verify the company before presenting it as such	Contract performance
Technical logs	Security, abuse detection	Legitimate interest

How long

Account, profile, favourites, alerts and the valuation counter are kept while the account exists. Deleting it erases them, and everything attached to them, at once.

A listing is kept while the account exists, whether online, sold, expired or archived: that is what lets you put it back online. It leaves the public pages as soon as it is no longer online. A draft left unchanged for thirty days is archived. Deleting the account erases its listings, their photos, history, valuations and the reports about them, as well as the professional account and its documents; the files themselves are erased from disk within twenty-four hours. Messages you sent remain readable by the person you wrote to, without your name: they were addressed to them. Your reports and phone number displays are kept, detached from your account, with no maximum period set to date; they never contain an IP address in clear.

Contact messages are kept while they are being handled, and no longer than twelve months. Technical logs, twelve months. Reset and verification links exist in the database only as hashes, and expire by themselves.

Who has access

The people who operate the service, and the technical provider hosting the infrastructure. No other third party. Administrative actions on an account are logged.

For listings, add: the public, for a published listing; the other participant in a conversation; a listing's author, for the details you send them through the form; the email delivery provider, for notifications; and esti.ma's valuation service, which receives only the property's features — never the text, photos or contact details.

Your rights

You have the right to access, correct, object to and delete your data. Most of it needs no one but you: the profile is edited and the account deleted from the “Profile” area, immediately and with no justification to give. For anything else, write to support@esti.ma — we answer within thirty days.

You may also lodge a complaint with the Moroccan data protection authority (CNDP).

Security

Traffic is encrypted in transit. Passwords are hashed. Session tokens expire, and changing your password immediately invalidates every token issued before it. Database access is restricted. No system is impregnable: should a breach affect your data, you will be informed.

Changes

Any substantial change to this policy will be announced on the site before it takes effect. The date at the foot of the page says when this text last changed.