Privacy Policy

0Dealer is a Pakistan-focused property marketplace. People use it to browse houses, apartments, plots and commercial property for sale or rent, and owners or authorised listing representatives use it to publish those listings.

The service is operated from the website 0dealer.com. This policy does not name a registered company, office address or company number because those details are not published on the site.

We collect the information you give us and the information the service needs to run.

Account information. When you create an account we collect your name, email address, phone number and password. The password is stored as a hash, not in plain text. You can later change your display name and, after a verification code, your email address. You may also add or change a phone number through the profile verification screens.

Authentication and session information. After you sign in we keep a session so the site knows who you are. Password-reset and email or phone verification use short-lived one-time codes.

Property listings. If you post a listing we store the details you enter: title, description, type, purpose, price, size, beds and baths where relevant, location, optional locality, photographs, and whether you say you are the owner or an authorised representative. The service also stores listing status, availability (for example active, sold or rented) and when the listing was created.

Reports, complaints and support. If you report a listing while signed in, we store the reason, any description you add, and a link to your account. If you use the contact / complaint form we store your name, email address, category, subject, message and, where you send it from a listing, that listing reference.

Technical information. The application reads your IP address to limit abusive traffic and, when bot protection is turned on, to check a human-verification token. Those checks are not written to a lasting user profile. The site does not currently run a separate advertising or analytics tracker.

We use this information to:

• create and manage accounts
• sign you in and keep you signed in
• send verification and password-reset codes when those features are used
• publish, edit, expire and remove property listings
• review listings before or after they go public
• let a signed-in, email-verified user request a poster's contact number
• handle reports, complaints and support messages
• protect the service against automated abuse and other misuse

We do not use your information to run advertising on the site. We do not sell listings as a brokerage.

Published listings are public. Anyone can see the listing title, description, photographs, price, property details, city and area, optional locality, approximate map position, the poster's display name, the “listed by” declaration, and when the listing was posted.

Your email address, password and account phone number are not part of that public listing payload. Email verification status and other account settings stay on your account pages.

Do not put extra personal or sensitive information in a listing description or photograph if you do not want it to be public. Once a listing is published, search engines and other visitors may copy it.

A listing page does not show the poster's phone number to visitors who are not signed in. The page asks those visitors to sign in and verify their email first.

After you sign in with a verified email, you can ask the service to reveal the poster's display name and phone number for that listing. The listing owner can see their own contact details without that extra step. Site administrators can also see contact details when they review a listing.

Phone numbers are therefore neither always private nor always public. They stay off the public listing until a permitted user asks to see them.

0Dealer uses a small number of first-party cookies to run the site:

• 0dealer_session — an HTTP-only sign-in cookie. It lasts up to 24 hours and is marked secure on the live site.
• 0dealer_csrf — a cookie used to check that form submissions come from our pages. It is readable by the browser so the site can send it with those requests.

When human verification is enabled, Cloudflare Turnstile may set its own cookies or similar storage to tell people from automated traffic. The site does not currently use advertising cookies, analytics cookies or a cookie-consent banner.

The application can send information to the following kinds of providers when they are configured:

• a transactional email provider, to send verification, password-reset or support-notification messages
• object storage, to hold listing photographs
• Cloudflare Turnstile, to check that a person is submitting a form
• OpenStreetMap tile servers, when you open the map — your browser requests map images from those servers

Hosting, databases and network operators that keep the site online will also process the traffic needed to deliver pages and store records. We do not publish a full list of those operators here.

We may also disclose information if we believe we must do so to operate the service, investigate abuse, or respond to a lawful request. We do not claim that information is never shared.

We take reasonable steps to protect accounts and listings. Passwords are stored as hashes. The sign-in cookie is HTTP-only. Listing photographs stored in private object storage are shown through time-limited links. Forms that change data use a CSRF check. Sensitive actions are rate-limited.

No online service is completely secure. You should use a strong password and keep your sign-in details to yourself.

You can delete a listing you posted from My Listings. That removes the listing and its photographs from the live database. Related listing reports are removed with the listing. Contact and complaint tickets are kept as a record even if the related account or listing is later removed.

Published listings stay on public search pages for 30 days from the date they were created, unless they are sold, rented, removed by moderation or deleted. After 30 days a listing expires from public search. The owner and administrators can still see an expired listing in their own views.

The site does not currently offer a self-service account-deletion control. If you want an account closed or personal information reviewed, use the contact / complaint form. We cannot promise that every copy is erased everywhere, including backups, logs or messages already sent.

While signed in you can update your display name, start an email change, manage phone verification, and edit or delete your listings.

For a correction, a privacy question, or a request about personal information we hold, write to us through 0dealer.com/contact. There is no separate privacy email address on the site.

0Dealer is a property marketplace. It is meant for adults who are looking for property or listing it. The registration form does not collect a date of birth, and we do not knowingly collect personal information from children. If you believe a child has created an account, please tell us through the contact form.

The site may link to other websites, including map tiles, social profiles in the footer, and pages you open from a listing. Those websites have their own privacy practices. This policy applies only to 0dealer.com.

We may update this policy as the service changes. When we do, we will change the last-updated date at the top of this page. You should review the page from time to time.

Questions about this policy, or about personal information on 0Dealer, can be sent through the contact page:

https://0dealer.com/contact