Privacy Policy

Last updated: August 2026

SoldForWhat Pty Ltd (ACN 697 151 170) ("we", "us", "our") is committed to protecting your personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

About the sales data on this site

The sold prices displayed on SoldForWhat are submitted by selling agents — they are not sourced from official Queensland Government Title or Valuation Office records. While we review submissions, we cannot independently verify every transaction. Treat the data as informational only, and do not rely on it alone for legal, valuation or financial decisions. Full details and further disclaimers are in our Terms of Service.

1. Information We Collect

When you play the daily game and create an account, we collect the display name you choose, your email address, and your game results (scores, streaks and guesses). We also keep a first-party, cookieless count of page views to understand site traffic — this collects no personal information and sets no cookies (see section 6).

Your display name is shown publicly on the leaderboard alongside your score; your email address and game history are not published. We use your email to identify your account and to send verification and account-related messages.

2. How We Collect Information

We collect information when you create an account or play the game, and a first-party, cookieless count of the pages you visit.

3. Why We Collect Information

We use your information to run the daily game and leaderboard, create and identify your account, improve our services, and send communications that relate to your account (such as email verification). If we ever send promotional or marketing emails, we will only do so where you have opted in, and every such email will include an unsubscribe link.

4. Sharing Your Information

We do not sell your personal information. Your chosen display name is shown publicly on the leaderboard.

Sharing with real estate agents (lead enquiries). If you use a lead or enquiry form on the site — such as "Find out what it's worth" or "Contact the selling agent" — and you tick the consent checkbox, we share the details you provide (your name, phone number, email address, and, if given, the property address and any comments) with the specific local real estate agent or agency associated with that property or suburb, so they can contact you about buying or selling. These details are sent to the agent automatically, by email and/or SMS, at the time you submit the form. You are never required to use these forms — you can play the game, view the map, and use the rest of the site without them; sharing only happens if you actively submit a form and tick the consent box.

Service providers. We share data with the providers that operate the platform — Google Firebase (hosting, authentication and database, in Sydney) and Brevo (transactional email and SMS) — only as needed to run the game and the lead-enquiry feature described above. We may share aggregated, de-identified data for analysis.

Overseas disclosure. Some providers are located overseas: Brevo (transactional email and SMS) is operated by Sendinblue SAS in France, so your email address is transferred to the EU; Sentry (error reporting) is operated from the United States. We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles.

5. Data Storage and Security

Your data is stored securely using Google Firebase infrastructure located in Sydney, Australia (australia-southeast1). We use industry-standard security measures including encrypted connections (HTTPS), authenticated access controls, and role-based data permissions.

6. Cookies and Analytics

We do not use Google Analytics, Microsoft Clarity, session recording, advertising trackers or any third-party analytics cookies. Because we set no tracking cookies and share no browsing data with third parties, no cookie-consent banner is required.

First-party analytics. We keep a simple, privacy-first count of page views to understand how many people visit the site. This is entirely first-party (processed only in our own systems), sets no cookies, stores no persistent identifier, collects no personal information, and cannot identify individual visitors. It records only an aggregate count and a coarse page name.

Anonymous device token. We store a small anonymous identifier (a randomly generated string, key sfw_anon) in your browser's local storage. It is not linked to your name, email or account, is never shared with third parties, and is not used for advertising or cross-site tracking. It is used only to distinguish new from returning game sessions for aggregate internal statistics. If you clear your browser's local storage it is deleted.

Session cookies. When you sign in, Firebase Authentication sets a secure session cookie used solely to keep you logged in. It is necessary to operate the service and is cleared when you sign out.

In the mobile app — staying signed in. If you use the SoldForWhat? iPhone or Android app, a copy of your sign-in session is stored in your device's secure credential store (the iOS Keychain), so you are not repeatedly logged out. It is encrypted by your device, readable only by this app, never synced to iCloud or included in a backup restored onto another device, and is deleted when you log out. It is never transmitted to us or to anyone else.

In the mobile app — daily reminders. The optional daily reminder is scheduled by your phone itself (a local notification) at a time you choose in your profile. We do not collect a push token, we send nothing to your device, and no information about your reminder leaves your phone. Your chosen time is stored only in the app's local storage. You can turn it off at any time in your profile, or in your device's notification settings.

We use Sentry for error and crash reporting to help us diagnose technical problems. Sentry may collect limited technical information such as error messages, your browser type and the page where an error occurred. It is not used for advertising.

7. Your Rights

You have the right to access the personal information we hold about you, request correction of inaccurate information, request deletion of your information, opt out of marketing communications, and lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Data Retention

Account and game data (display name, email, scores, streaks, guesses): retained while your account is active so your leaderboard history and streaks persist. If you delete your account, or ask us to, your personal data is removed.

Analytics and browsing data: retained in aggregated, de-identified form for site analysis and is not linked to your identity.

You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond promptly — generally within 30 days — consistent with the Australian Privacy Act 1988.

Deleting your account. To permanently delete your account and associated personal data, follow the steps on our Delete your account page, or email hello@soldforwhat.com.au with the subject "Delete my account". We action deletion requests within 30 days and confirm by email once complete.

9. Past Games Engagement Tracking (members only)

What we collect. If you are logged in and use the Past Games map, we count how you interact with it so we can measure interest in each property — specifically property-detail views, agent-profile (“see their sales”) views, and photo opens. This counting is part of using the Past Games feature. These interactions are turned into aggregate counts only, tallied per property and per agent. We do not keep a log of your individual browsing activity linked to your name or account. Because these counts are genuinely aggregated and non-identifying, they are not personal information about you once aggregated. Past Games is currently available to members only.

Why we collect it. We use these aggregate counts to generate engagement statistics (for example, total view counts) that we share with the selling agents whose properties appear in Past Games, so they can understand the level of interest in their listings. Where we share this with agents, it is provided as aggregate counts only — we do not disclose your name, account details, or any information that identifies you as an individual to any agent through this feature. We do not currently surface these counts to agents; before we do, we will apply minimum thresholds so that no count derived from a small number of interactions could single you out.

Analytics. As stated in section 6 above, we do not use Google Analytics, Microsoft Clarity, session-replay or heatmap tools, or third-party analytics cookies. We measure interest using a first-party, cookieless page-view count and the aggregate, non-identifying engagement counts described in this section — none of which involve third-party tracking or session recording.

Retention. We keep only aggregate counts, tallied per property and per agent — we do not retain an individual, account-level log of your Past Games activity. Because these counts are genuine aggregates that are not linked to you, they are not your personal information once aggregated and may be retained to give agents ongoing interest statistics.

Access and correction. You can request access to, or correction of, the personal information we hold about you under Australian Privacy Principles 12 and 13 by emailing hello@soldforwhat.com.au.

10. Contact

For privacy enquiries or to exercise your rights, contact us at: hello@soldforwhat.com.au