What we keep, and what we will never do with it

What we collect

Only when you do the thing that needs it. You can read every page, open the map, look up blocks and check the 1080 records without giving us anything at all — and without an account.

If you make a hunter profile

Your name, email address, and — only if you choose to add them — a phone number, the region you hunt, a short blurb, a photo, and any licences or references you list. This is the thing a landowner sees when they scan the code on your letter, which is the entire reason it exists.

If you ask a landowner for access

The message you write, which block it concerns, and whether they accepted, declined or did not answer. If they reply, we keep their reply so you can read it.

If you own land and register interest

Your name, email, phone if you give one, your region and locality, what you want taken off the place, and any conditions you set. Nobody is charged and nothing is published.

If you ask to be told when there is something near you

Your email address and, if you pick one, the region you hunt. That is all it is used for.

If you tell us something is wrong

Your message, the page you were on, and your email address only if you give one so we can reply.

Addresses we look up

When the map resolves the postal address for a block, we cache that address so we do not pay to look it up twice. We do not store the owner’s name with it — the letter is addressed to the property, not to a person.

What we will never do

We never give a hunter a landowner’s details.

Not the name, not the address, not the email or phone — not even after the landowner says yes. All the hunter is told is that a landowner said yes. Anything more than that is something the landowner chose to send, on the day, about that person.

We never sell anything to anybody.

No lists, no addresses, no “partners”. There is no version of this business where the data is the product.

We never publish a landowner’s name.

Not on the map, not in a directory, not anywhere. The map shows boundaries and a postal address; who owns the place is between them and the public record.

We do not track you around the internet.

No advertising pixels, no third-party trackers, and no cookies at all — including for analytics. If you sign in, your session is kept by your own browser, not by us.

Where it is stored

In a Supabase database in Sydney, Australia, and the site itself runs from Sydney too. We say the country because the Privacy Act treats sending personal information overseas as a real decision, and it was one — the database used to be in Tokyo and we moved it, partly for speed and partly because Australia is the closest place with comparable privacy law.

Two other companies touch it. Resend sends our email, so it handles the address of anyone we write to. Vercel runs the site and counts pageviews — that count is anonymous, sets no cookie, and cannot tell us who you are.

One deliberate detail: when a landowner asks not to be written to again, we store a one-way hash of their address rather than the address itself. It is enough to stop another letter and not enough to reconstruct who they were.

What we count

Pageviews, by page, and a handful of steps on this site: opening a property on the map, starting a letter, subscribing to the ballot calendar, and submitting the signup form. Each is one row saying which page or step, the kind of site the visit came from (Facebook, a search engine, typed in), whether it was a phone, and whether someone was signed in. There is no IP address, no cookie, no user id, and nothing that links one row to another or to you. The kind of site you came from is remembered in your browser tab until you close it, and that is all. We also count which outbound links get clicked, by link. That record has no IP address, no browser fingerprint and no user attached to it: it tells us that a scope maker was clicked eleven times, never that you clicked it.

Your side of it

Under the Privacy Act 2020 you can ask what we hold about you and have it corrected. You can also ask us to delete it, and unless we are legally required to keep something, we will — including your whole account.

Ask at admin@nzhunters.co.nz and one person reads it, not a queue. If we get it wrong and you are not satisfied with how we handle it, you can complain to the Office of the Privacy Commissioner ↗, and you do not need our permission to do it.

How long we keep it

Your profile and your requests last as long as your account does. An access request stays after it is answered, because both sides may need to remember what was agreed. A request to stop hearing from us is kept permanently and deliberately — it is the only way to guarantee we honour it.