Privacy Policy

Last updated: June 2026. Applies to obx.deals, search.obx.deals, and owners.obx.deals.

What we collect

When you click an outbound listing link on any OBX Deals property, we record:

• The destination URL
• An anonymous browser ID — a UUID we generate and store as a first-party cookie, never tied to your email, name, or any other identifier
• The country your request came from (from CloudFront headers — not a precise location)
• A coarse device class (mobile vs. desktop, from the User-Agent string — the string itself is not stored)

We do not store IP addresses, full User-Agent strings, or any third-party tracking identifier.

If you submit your email address via the signup form, we store it in our subscriber table along with the features you opted into. We do not sell or share your email address.

Cookies

We set one first-party cookie: obxd_vid. It contains a random UUID, expires after 365 days, and is shared across all *.obx.deals subdomains so we can count a visitor once even if they navigate between our properties. It carries no personal information.

How we use this data

Click data is used to measure which properties generate interest and to understand which property management companies drive the most traffic — this feeds the owner intelligence tools. It is never sold or shared with third parties.

Email addresses are used only to send the digest or alerts you signed up for. Every email includes a one-click unsubscribe link.

Owner Hub (owners.obx.deals)

The Owner Hub uses Auth0 for authentication. When you log in, Auth0 stores a session token in memory (not localStorage) to reduce XSS exposure. We store your email address, property ID, and subscription tier in our user table. Payment processing is handled by Stripe — we do not store card numbers.

Data retention

Click records expire after 365 days. Subscriber records are retained until you unsubscribe. Owner Hub accounts are retained until you request deletion — use the contact form below to submit a deletion request.

Opting out of click tracking

Any of the following will prevent click tracking:

• Enable Do Not Track in your browser (we honor the DNT header)
• Block track.obx.deals in an ad blocker
• Clear or block the obxd_vid cookie

The site works fully either way — tracking is never required to use any feature.

Third-party services

• AWS CloudFront / Lambda — serves the search API and click tracker
• Auth0 — authentication for the Owner Hub
• Stripe — payment processing for Owner Hub subscriptions
• GitHub Pages — hosts the static HTML for all OBX Deals properties

Contact

Use the form below for questions about this policy, account deletion requests, or any other privacy concern.