Privacy policy
Effective July 22, 2026
Zip Code Report (zipcodereport.com) is operated by ALLTEK LLC. This page explains what personal information the site collects, why, and who else sees it. The short version: you can read every free report without giving us anything; buying a report takes one piece of personal information — your email address — and we use it to deliver what you bought. We do not sell your data, and there are no advertising or tracking scripts on this site.
What we collect
Your email address, when you buy a report. Checkout runs on Stripe's own hosted payment page, which collects your email and passes it to us with the completed payment. We use it to send your receipt and the private link that opens the report. Buying does not create an account and there is no password.
Your payment details go to Stripe, not to us. Card numbers are entered on Stripe's page and handled by Stripe. We never see, receive, or store a card number. What we keep from a purchase is the email address, the ZIP code, the amount, the date, and Stripe's reference for the payment.
Your email address, when you ask to recover access. The recovery page takes an email address and re-sends the links for purchases made with it. To limit abuse of that form we record that a request happened using a one-way hash of the address — not the address itself.
Subscriber accounts. Real-estate professionals on a subscription sign up in a separate subscriber portal, which does create an account (name, email, password) and stores the billing details Stripe returns for the subscription. Subscribers may also add their own contact details and logo to appear on reports they prepare; that information is supplied by them and shown only on their own reports.
Email we send you
Only transactional email — messages tied to something you did: a purchase receipt with your access links, a recovery email you asked for, a note that a report you unlocked is ready, and a reminder before unused report credits expire. There are no newsletters and no marketing campaigns, so there is no marketing list to unsubscribe from. Your address is never sold, rented, or shared for anyone else's marketing.
Analytics — server-side, no trackers
We measure how the product is used so we know which ZIP codes people look for and where the purchase flow breaks. All of it is recorded on our own server as the page is served. There are no third-party analytics services, no advertising networks, no social-media pixels, and no analytics JavaScript running in your browser.
What a recorded event contains: what happened (a ZIP was searched, a report was viewed, a checkout was started or completed), the ZIP code involved, and the time. To tell one visit apart from another without identifying anyone, we store a one-way hash computed from your IP address, your browser's user-agent string, and a secret value known only to our server. The IP address and user-agent themselves are never stored.
Cookies
This site sets only functional cookies — the ones that make a purchase work. All of them are set by us, marked httpOnly (scripts on the page cannot read them), and none are used for advertising, profiling, or cross-site tracking. There is no third-party cookie on our pages, which is also why you are never asked to accept a cookie banner.
- zcr_access_{zip} — proves you bought the report for that ZIP code, so the paid pages open for you.
- zcr_sub — the signed-in session for subscribers.
- zcr_pack — the session for an Investor Pack, so its credits can be spent from a report page.
- zcr_admin_{zip} — lets our own support staff open a specific purchased report to investigate a problem with it.
Stripe's checkout page is on Stripe's own domain and sets its own cookies under Stripe's privacy policy; the same is true of the subscriber portal's sign-in session.
Maps
Report pages draw a map of the ZIP code's boundary. The map tiles are loaded by your browser directly from OpenStreetMap, so OpenStreetMap receives that request — including your IP address — exactly as any website you visit does. We send them nothing about you, and the tiles are not used for tracking or advertising.
Who else sees your information
We do not sell personal information, and we never share it with advertising networks or data brokers. It reaches only the services needed to run the product:
- Stripe — our payment processor. It handles the checkout page, the card details, subscriptions, and refunds.
- A transactional email delivery service — receives the address and the message so your receipt and access links can be delivered.
- Our hosting provider — operates the servers this site runs on.
We may also disclose information if the law requires it, or where we must to establish or defend a legal claim.
How long we keep it
Purchase records — the buyer's email, ZIP code, amount, and date — are kept for as long as you may need access to what you bought (access links are valid for 12 months) and afterwards for accounting and tax records. Analytics events carry no name or address and are kept as product history. A refunded purchase is not deleted: the record of the refund is part of the accounting trail.
Your choices
Write to support@zipcodereport.com to ask for a copy of the personal information we hold about you, to correct it, or to have it deleted. Please write from the address you used at checkout so we can tell which records are yours. We will not ask you to give a reason, and this applies wherever you live. Two honest limits: deleting your data does not undo the purchase records we are required to keep for accounting, and it does not reach Stripe's own records of a payment — for those, contact Stripe. Deleting a purchase record also ends your access to the report it covers.
Children
This site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us their information, write to support@zipcodereport.com and we will delete it.
Changes to this policy
We may update this policy; the current version is always on this page, with its effective date at the top. Material changes will be reflected in that date, so it is worth a look if you are returning after a while.
Governing law & contact
This policy is governed by the laws of the State of Maryland, without regard to its conflict-of-laws principles — the same as our Terms of Use. Questions about privacy, or a request about your data: support@zipcodereport.com, ALLTEK LLC.