Your address stays private.

The short version

• You can check an address without creating an account.
• Exact addresses, coordinates and private schedules are not published or added to search indexes.
• Saved address data is encrypted at rest, and private access keys are stored only as hashes.
• We do not sell personal information or use address data for advertising.

Information we process

Address search and lookup. As you type, the address search text is sent to Google Places to return Australian address suggestions. After you select a complete address, we process its Place ID, normalised address components and coordinates so we can identify the relevant council and check an official property service.

Private results. We store the normalised address, coordinates, lookup progress, official collection result and source evidence needed to return the private result. The address and coordinates are encrypted. A separate keyed digest is used to recognise a repeat lookup without searching plaintext addresses.

Optional accounts. If you continue with Google, we receive the account name, email address and profile details Google supplies for the openid, email and profile scopes. If you continue with email, we use the address to send a single-use sign-in link. Collections Day does not store account passwords.

Optional notifications. If you ask to be notified when a lookup finishes, we encrypt the email address and private result credential until the transactional message is sent or the lookup is deleted.

Optional feedback. If you send feedback, we process the message and any reply email address you choose to provide. Please do not include a private result link, access key or unnecessary personal information.

How we use it

• Return address suggestions and match the selected property to an official council service.
• Create and protect a private collection result, reuse a fresh cached result, and refresh stale information.
• Provide optional sign-in, saved-address access and account security.
• Send a requested sign-in link or one requested lookup-completion email.
• Deliver feedback you choose to send and reply when you invite a response.
• Prevent abuse, apply rate limits, diagnose failures and protect the service.
• Measure privacy-safe page views and broad product actions so we can improve the service.

Service providers and official sources

Cloudflare hosts the application, database, workflows, browser fallback and transactional email service. Google provides Places address search, optional Google sign-in and privacy-limited analytics. Relevant address information may also be sent to Australian government, ABS or council systems when required to route or verify an exact property schedule.

These providers process information under their own terms and privacy practices. Cloudflare and Google operate globally, so technical or account information may be processed outside Australia.

Analytics and cookies

Google Analytics receives page paths and a small set of product actions. Private lookup paths are reduced to /lookup/private. Custom analytics events do not include typed or selected addresses, coordinates, job IDs, access keys, collection schedules or email addresses. Advertising signals and optional Google account data sharing are disabled.

The service uses security and session cookies when you sign in. Cloudflare, Google and browsers may also process standard technical data such as IP address, device, browser and referrer information when delivering or protecting the site.

Retention and deletion

A guest property and its schedule remain available through the private link until you delete it. A signed-in user can remove a saved property or delete their account. A property is deleted when it is no longer saved by another household account. Related schedules, jobs, events and notification records are removed with the property through database relationships.

Account sessions can last for up to 30 days. Email sign-in links expire after 10 minutes and work once. After a notification is successfully sent, its delivery record is scheduled for deletion after about 24 hours. Failed delivery records may remain for operational follow-up until the lookup is deleted or the record is otherwise cleaned up.

Feedback is delivered to the service owner’s email inbox and may be kept while it remains useful for improving the service or responding to you. You can ask for feedback containing your email address to be deleted.

Your choices

• Use the exact-address finder without an account.
• Do not request an email notification.
• Send feedback without providing an email address.
• Delete a guest result from its private page.
• Remove a saved address or delete your account from the account page.
• Use browser controls to limit cookies, noting that blocking security cookies can prevent sign-in.

Security and changes

We use encryption, hashed access credentials, restricted private pages and no-store/noindex controls to reduce risk. No online service can promise absolute security, so keep private result links and sign-in emails confidential.

We may update this notice when the product, providers or legal obligations change. The effective date at the top will change when the notice changes materially.