Privacy notice
Your address, in plain words
What we keep, who can see it, and how long. Last updated 6 October 2026.
- No account, no tracking. We don’t ask for your name or email, and we record nothing about the riders who open your link.
- Anyone with your link can see the address. That includes anyone it gets forwarded to.
- You choose how long it lasts (24 hours, 7 days or permanent), and you can delete it any time with your manage link.
What we store when you create a link
- The pin you place, rounded to about 1 metre, and how accurate your phone’s location reading was.
- The directions you write, and, if you add them, a name for the address, a phone number and a NIPOST postcode.
- A gate photo, if you add one. It’s shrunk and re-saved on your phone first, which removes hidden data such as where it was taken.
- When the link was created, changed and when it expires, and when you confirmed you understood who can see it.
- A scrambled (hashed) copy of your manage key. We can check a key but can’t read it back.
What we don’t store
- Your name, email, account or contacts.
- Your location history. We only keep the single pin you choose to share.
- Anything about the people who open your link.
- Your IP address. To stop abuse we count requests using a scrambled version of it that changes every day and can’t be turned back into the address. Those counts are deleted within about two hours.
Other things we keep
- Usage totals. Daily counts only, such as “12 links created today” or “40 address pages opened”. They contain no addresses, links, IP addresses or anything that identifies a person.
- Reports. If you report a link, we keep the link code, the reason you chose and anything you write, so we can review it. We don’t record who sent it. Reports are erased after 90 days.
- Ad bookings. If you book an ad, we keep your name, email, optional WhatsApp number and the ad itself to review it, arrange payment and send you its results. Ads count views and clicks as daily totals only; nothing about the people who see them is recorded, and no ad tracks anyone.
- Printed-plate requests. If you ask us to print a plate, we keep your name, phone number, area, postcode and order details to contact you with a quote, only with your consent, and erase them after 90 days.
Who can see it
Anyone who has the link to your address page. Links use a random 12-character code, so they can’t realistically be guessed, and the pages tell search engines not to list them. But a link can be forwarded, so only share it with people you trust, and use a one-time link when you don’t need a permanent one.
Your manage link is different: whoever holds it can edit or delete your address. Keep it to yourself.
How long we keep it
- One-time: stops working after 24 hours.
- This week: stops working after 7 days.
- Permanent: until you delete it.
An expired link stops working at once, and its data is erased within the hour. When you delete a link, the address, directions, phone number and photo are erased immediately. Address pages are never stored in shared caches, so nothing lingers.
Where it’s stored
With our hosting provider, Cloudflare. Pages are served from Cloudflare’s network, including its Lagos location, but the database that stores links, photos and requests is in Western Europe, outside Nigeria. Everything travels over an encrypted (HTTPS) connection.
Other services your browser talks to
- OpenStreetMap supplies the map images, so their servers see your IP address when a map loads. See the OpenStreetMap privacy policy.
- Google Maps, Waze, Apple Maps and WhatsApp are only contacted if you tap one of their buttons. Their own privacy policies apply from then on.
- NIPOST’s postcode finder is only opened if you tap a “find my postcode” link. If you used your location or dropped a pin, that point is included in the link so NIPOST can show the postcode for it; Doorstep doesn’t keep it.
- Google Translate is only used if you choose a language in the menu. Google then loads that page to translate it. The option is turned off on address and manage pages, so private links are never sent to Google.
- Cloudflare Web Analytics counts visits to our public pages without cookies. Cloudflare sees your IP address and the page visited, but address pages, manage pages and the dashboard are never measured. See Cloudflare Web Analytics.
Our fonts and code are served from Doorstep itself, not from outside services.
Your rights
Under the Nigeria Data Protection Act 2023 you can see, correct and delete your information. You can do all three yourself, straight away, with your manage link, and deleting the link also withdraws your consent. If you’ve lost your manage link, contact us with the address link and we’ll help.
Doorstep is run by Extrafemi Labs, the data controller for what it stores. Contact: obasaolorunfemi@gmail.com.