Privacy policy
Last updated: 29 September 2026 · Estanza is operated from the European Union.
What we collect
- Account data: your email address, the passkeys you add, your sign-in sessions and your settings. We use passwordless sign-in, so we never store a password.
- Your homes: floor plans, the plan pictures you trace, 3D models, room names and the edits you make. This data can describe your real home, so we treat it as personal data.
- Your requests: what you type in the ask box to change your home, and the answer you get back. The ask box is switched off right now.
- Messages to us: what you send with the feedback form, linked to your account, and what you send with the contact form, which arrives in our email inbox.
- Your IP address: our server uses it for a moment to stop abuse and for the security check on our forms. We do not store it ourselves, except in scrambled form for up to two days when you ask for a sign-in code. Our content delivery and security provider keeps a log of each request to our server, which can include your IP address, for 7 days.
- Usage analytics: a named list of actions in the app, and a count of how often your shared homes are opened. No advertising trackers.
Usage analytics
In the app we record a named list of actions, for example creating a home, publishing one, or opening a share link. These records are linked to your account, or to a random browser identifier if you have no account. They never carry your floor plan or your room names.
In the browser we collect these records with privacy-friendly analytics that run on our own server. They record the country and the city a visit came from.
The ask box is switched off right now. When it is on, it is the exception. When you ask for a change, we keep what you typed and the answer you got, tied to your account, so we can see where Estanza misunderstands people and improve it. Every tool in the editor works without the ask box.
We also count how often each shared home is opened, including the views that arrive from the Home Assistant card. What we keep is a count. It says nothing about the person who looked, and it is not tied to any account.
For those counts our server stores only the country a view came from. It does not store the IP address or the city. An IP address can often be traced back to a person, and a country cannot.
Cookies and browser storage
If you use Estanza without an account, two things mark your browser, and neither says anything about who you are. Your browser keeps a random identifier under the name estanza.guest_id. It is sent with the usage records described above. It is never used on other websites, and it is gone when your browser storage is cleared. When you use the ask box without an account, we also set a cookie named estanza_guest. It is not an analytics cookie and it is never used for advertising: its only job is to tell us that a run of free requests came from the same browser, so that the daily limit means something. It holds nothing but a random identifier, no script on the page can read it, and your browser sends it back only to the address that answers those requests.
When you sign in, we set two more cookies. One keeps you signed in for up to 30 days. The other lasts 10 minutes and ties the code we email you to your browser. Both are needed to sign in, and no script on the page can read them.
The app also keeps your homes, their history and your settings in this browser, so it works without a connection.
Who processes your data
A few providers handle data for us, and only for us. Our hosting provider, with servers in Germany, runs our database and our analytics. Our content delivery and security provider runs the app, stores the files of your homes and our backups, runs the model behind the ask box and sends our emails. Our email provider holds our inbox. The security check on our forms is Cloudflare Turnstile, which runs in your browser. Estanza decides what is collected and why.
When you ask for a change
The ask box is switched off right now. When it is on, it sends what you typed, plus your home model, to an AI model run by our content delivery and security provider, which works out the change and sends it back. Your account and your email address are not sent. Before your text leaves our server, we remove email addresses, IP addresses and some kinds of access key from it. Please do not type names or street addresses into the ask box; it does not need them. Want to know more about how this works? Write to us: hello@estanza.casa.
What we never do
- Sell your data.
- Show your home to anyone unless you create a share link.
- Give your email address or your identity to anyone except the processors named above, who handle it only for us.
Where data lives
Our database and our analytics run on servers in Germany. The files of your homes and our backups are stored in western Europe. Some providers may process data outside the EU. When they do, the EU's standard contractual clauses protect it.
How long we keep things
Your account and your homes stay while your account exists. Their history thins out as it gets older. We keep every version from the last 30 days, then one version a day up to 365 days, then one version a month after that. We do not thin out the newest version of a home, the version currently published or any version you restored from. Usage records stay linked to your account while it exists, and they carry no floor plans. Your feedback and what you asked the ask box stay while your account exists and are deleted with it.
We back up our database every day, encrypted, and keep each backup for 4 days at most. So data you delete is gone from our backups within about 5 days.
When you delete a home, we delete its history and its plan pictures at once. What is left of it is removed for good 30 days later.
A sign-in session ends after 30 days at most, and we delete it the night after. Sign-in codes are deleted within two days.
Your rights (GDPR)
You can delete your account at any time from your settings. When you do, we erase your email address at once, sign you out on every device, and delete your passkeys, your settings, your feedback and what you asked the ask box. Once done, we cannot undo it.
Your homes go too. Their history, plan pictures and share links are deleted at once, so nobody can open them. What is left of them is removed for good 30 days later.
You can ask us for a copy of your data at any time and we will send it to you, and you can download any of your homes as a file from the home menu in the editor whenever you like. Usage statistics remain after your account is deleted, and so do the counts of how often your shared homes were opened. They no longer point to your email address. One copy of the usage statistics, kept for us by our content delivery and security provider, still carries your random account number for up to 3 months. For any request: hello@estanza.casa. You also have the right to lodge a complaint with your data protection authority.
Contact
Data controller: Estanza. Contact: hello@estanza.casa.