Fixed Yet privacy policy

Last updated: October 20, 2026.

Fixed Yet is a status page for each New York City apartment building, where tenants report outages and see how many neighbors reported them. It is run by Standard Computing LLC, 5441 S Macadam Ave., Ste. N, Portland, OR 97239, USA (“we”). We are responsible for the personal data described here. Questions or requests: support@standardcomputingllc.com.

Tenants never need an account or a password. Only building managers sign in.

What we collect and why

When you report an outage or tap “Me too”

The building, what is out (heat, hot water and so on), and your apartment number, and when you reported.
Optionally, a note of up to 140 characters, on the full report form only. “Me too” has no note.
We use your apartment number only to count each apartment once. We never show it, and we don't keep your name, email or phone number for a report.

When you start a building's page

The address you type is sent by our server, not your browser, so without your IP address, to New York City's GeoSearch service (geosearch.planninglabs.nyc) to find the building. We don't store what you typed. We store the building's official address, borough, ZIP code, number of homes and city lot and building numbers, all from public records, and never who started the page.

When you follow a building

Your email address and the building, to send a link to confirm it, and then updates about that building's outages and its manager's posts.
If you reached us through a link or QR code that carries a short source label (such as “qr”), we keep that label with the request, to see which posters and links work.

When you tell a landlord

The landlord's or managing agent's email address, as you type it. We use it to send them one email about that outage and never show it. The email says what is out, where and since when, and how many apartments reported it, never which apartments, your name or any note. It tells them why they got it and how to ignore it.
The form may suggest a company that New York City's housing department (HPD) lists as the building's managing agent, site manager or corporate owner, from the city's public registration data. We keep the suggestion with the building. We leave out individuals the registration lists without a company.

When you are a building's manager

Your email address, to sign you in with a code we email you, and a record that you signed in. We don't ask for your name or a password.
Your claim on a building's page: when you started it, your answer to the price question, whether the claim came through the landlord email's link, and who on our side approved or rejected it and when.
The updates and notices you post to a building's page.
One cookie, which keeps you signed in. It lasts 7 days, renews while you use the site, and is removed when you sign out. Tenants get no cookie from us.

Everyone

Technical data. Cloudflare, which hosts Fixed Yet, sees your IP address and browser to deliver the site. To stop a flood of forms, Cloudflare's rate limiter counts requests by IP address for a moment. We don't store the address. For the manager sign-in form we keep only a one-way scrambled (hashed) form of it, for a day after your last attempt, then delete it the next time anyone signs in or we send an email.
A bot check (Cloudflare Turnstile) on the forms, run in your browser and decided by Cloudflare.
Visit counts. We count page views and actions: the page, the country you're in, the website that sent you and the link or QR source label. For an action we add only: how a manager signed up; the borough of a page created; the kind of outage reported and whether the report started it or joined it; the kind of outage closed and whether a tenant or the manager closed it; whether a note passed the check, was refused (and the reason: health, name, rating or contact) or couldn't be checked; a manager's yes or no to the price question; whether a post was an update or a notice; and, for a landlord email sent, a confirmed subscription, a claim started, a price answer, a post or a rate-limited report, the building page's anonymous id. They use no cookie and hold no email address, apartment number, note or IP address.
Error reports. When Fixed Yet hits an error, Sentry receives a diagnostic report: the error, the address of the page without anything after a “?”, and your browser's name, version and operating system (as your browser reports them). It never includes anything you typed, your IP address or your email address. If you are signed in, it includes your anonymous account id.

There are no ads and no advertising or tracking cookies, and we never sell or share your data for marketing. The emails we send are plain text, with no tracking pixel.

What other people can see

Anyone who opens a building's page sees its address, the outages reported, how many apartments reported each, when they were reported, and any notes. Apartment numbers are never shown, only counts.
Notes are shown word for word under the report, to anyone. Before one is saved, an automatic check looks for health details, names of people, ratings of a person and contact details, and removes email addresses, links and phone numbers. If the check can't run, the note is not saved and you can send the report without it. Please don't write names or health information in a note.
A manager's updates and notices appear on the page with their date, without the manager's name or email, and go by email to the building's subscribers.
Subscribers' email addresses and landlords' email addresses are never shown on a page.

Who processes it for us

Cloudflare (USA): hosting, our database, the bot check, visit counts and, for the note check, Workers AI, reached through Cloudflare's AI Gateway. A note that gets past our first, simple check is sent there to be read, including one the check then refuses for health details or names. The AI Gateway may keep a log of that text, for as long as its log retention lasts.
Resend (USA): delivers our emails (sign-in codes, landlord emails and building updates).
Sentry (USA): error diagnostics.

They process your data only on our instructions. Your data is processed in the United States; for people in the EU and UK, transfers rely on the safeguards these providers offer, such as the EU Standard Contractual Clauses.

How long we keep it

Outage reports, apartment numbers and notes: we have no automatic deletion. They stay in our database for as long as the building's page exists, which is how a page can show its history. A page shows the outages that are open and those fixed recently. To have a report or note removed, write to support@standardcomputingllc.com with the building, the apartment, roughly when you reported and what the note said. We have no account to check who wrote a report, so we can remove only one that you identify.
A subscription: until you unsubscribe. Every update email has an unsubscribe link, and pressing its button deletes your address at once. An address that is never confirmed is deleted once 48 hours have passed since the request, the next time anyone opens a building's page.
A landlord's email address and what went with it: for as long as the page exists. The landlord can write to support@standardcomputingllc.com to have it removed.
A manager's account, claim and posts: while the page exists. To close your account or take down a post, write to support@standardcomputingllc.com from the address you sign in with.
Sign-in codes: they expire after 10 minutes, are stored scrambled, and a used code is deleted. A signed-in browser lasts 7 days. We don't keep the IP address or browser details of a sign-in.
Scrambled IP address for the sign-in limit: a day after your last attempt, then deleted the next time anyone signs in or we send an email.
The text of a note sent to be checked, including one we refuse: it may be kept in the AI Gateway's log, at Cloudflare, for as long as that log's retention lasts. Notes we save are covered above.
Visit counts: three months, at Cloudflare.
Error reports: 30 days, at Sentry.
Records of emails sent: 30 days, at Resend.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by writing to support@standardcomputingllc.com. We answer within 30 days. In the EU and UK you can also complain to your data protection authority. In California you have rights under the CCPA. We treat everyone the same, wherever they live.

Children

Fixed Yet is not meant for children, and we don't knowingly collect their data. If you think a child's details are here, write to support@standardcomputingllc.com and we will remove them.

Changes

If we change this policy, we post the change here and update the date at the top.