BidderBud Logo

Privacy Policy

Last updated: February 2026

This privacy policy explains how BidderBud collects, uses, and protects your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).

1. Who We Are

BidderBud is operated by a private individual based in Sweden. BidderBud is a free educational tool that helps first-time homebuyers navigate the Swedish housing market.

Contact: contact@bidderbud.com

2. What Data We Collect

Data you provide

  • Account information: email address, name, and password when you create an account
  • Profile details: phone number and address (optional)
  • Household information: names and salary details for up to 4 household members
  • Loan information: preliminary interest rate, down payment, and amortization rate
  • Saved calculations: property details, costs, and income sources for mortgage scenarios
  • Progress tracking: which steps and tasks you have completed in the home buying guide
  • Feedback: responses submitted through our feedback form

Data collected automatically

  • Analytics data (only with your consent): page views, feature usage, and device information via Firebase Analytics
  • Language preference cookie (NEXT_LOCALE) to remember your chosen language
  • Browser local storage: onboarding status and UI preferences

Data we do not collect

We do not collect payment information, government IDs, social security numbers (personnummer), or geolocation data. Camera, microphone, and payment browser APIs are explicitly disabled.

3. Why We Collect Your Data (Legal Bases)

  • Contract: Account data, profile, household, financial, and progress data are necessary to provide the service you signed up for
  • Consent: Analytics data is only collected when you explicitly opt in via our cookie banner
  • Legitimate interest: IP-based rate limiting to prevent abuse of our property lookup feature

4. How We Use Your Data

  • Providing your account and saving your profile information
  • Running mortgage calculations and saving your scenarios
  • Understanding how the site is used so we can improve it (with your consent)
  • Preventing abuse through rate limiting

5. Who We Share Data With

We use the following third-party services to operate BidderBud. We do not sell or share your data with any other parties.

  • Google Firebase (Authentication & Firestore): stores your account and user data. Google acts as a data processor under their Data Processing Agreement.
  • Firebase Analytics (with your consent): processes anonymized usage data to help us improve the site
  • Hemnet.se: when you use the property lookup feature, the Hemnet URL you provide is fetched server-side to retrieve listing details
  • Google Fonts: loads the PT Sans font. Your IP address may be transmitted to Google when fonts are requested.

We never sell, rent, or trade your personal data to third parties.

6. Cookies & Local Storage

Essential cookies (no consent required)

  • NEXT_LOCALE: stores your language preference (English or Swedish). Expires after 1 year.
  • Analytics consent status: records whether you accepted or rejected analytics cookies. Expires after 365 days.

Optional cookies (require consent)

  • Firebase Analytics cookies: only set if you click "Accept Analytics" in our cookie banner. Used to understand site usage.

Browser local storage

  • Onboarding status: remembers whether you have completed the welcome tour
  • UI preferences: expanded/collapsed sections and other display settings

7. Data Retention

  • Active accounts: your data is kept as long as your account is active
  • Inactive accounts: accounts with no login for 24 months may be anonymized
  • Analytics data: retained for 14 months (Firebase default)
  • Deleted accounts: your personal data is immediately anonymized, household members and saved calculations are permanently deleted

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: you can view all your data within the app (profile, household, calculations, progress)
  • Right to rectification: you can edit your profile, household members, and calculations at any time
  • Right to erasure: you can delete your account from the profile settings page. This anonymizes your personal data and deletes your household and calculation data.
  • Right to object: you can opt out of analytics at any time through the cookie consent settings
  • Right to data portability: contact us to request a copy of your data

To exercise any of these rights, you can use the in-app features or contact us at contact@bidderbud.com

9. Data Security

We protect your data using industry-standard security measures including HTTPS encryption, Firebase Authentication, Firestore security rules that restrict access to your own data, Content Security Policy headers, and protection against clickjacking (X-Frame-Options). While no system is 100% secure, we take reasonable measures to protect your personal information.

10. International Data Transfers

Your data is processed by Google services (Firebase, Analytics) which may transfer data outside the EU/EEA. Google provides appropriate safeguards through Standard Contractual Clauses (SCCs) as approved by the European Commission.

11. Age Limit

BidderBud is an educational tool about the Swedish home buying process. The content is educational in nature and does not require age verification.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last updated" date. For significant changes, we will notify registered users via email.

13. Contact & Complaints

If you have questions about this privacy policy or how we handle your data, please contact us at contact@bidderbud.com

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se if you believe your data protection rights have been violated.