Short-term rental rules for 17 US markets
View the Project on GitHub zero-zero-youtube/lodgepost-support
Last updated: August 11, 2026
Lodgepost has no account, no sign-up, and no analytics. Everything you enter — your properties and their details — stays on your device and never reaches us.
The one exception is the subscription check. To confirm you are a subscriber, your app sends us the transaction Apple signed for it, and that transaction carries an identifier for your subscription. We hold that identifier only as the key of a two-minute request counter. The section below says exactly what that means.
Your properties — nicknames, addresses, bedroom counts, license dates and the jurisdictions you attach to them — are stored only on your iPhone. They are never transmitted to us. We cannot see them, and we could not produce them if asked, because we never receive them.
If you use iCloud backup, Apple backs up this data as part of your device backup under Apple’s terms. That is between you and Apple; it does not pass through us.
Subscription check. To deliver regulation updates to subscribers, the app sends the signed subscription transaction issued by the App Store to our data server. We verify Apple’s signature on it and check that it is for this app and for a current subscription.
That transaction contains an identifier Apple assigns to your subscription. It is not your name, email, or Apple ID, and it does not identify you outside this app — but it is the same value on every request you make, so requests can be counted per subscriber. We use it for exactly one thing: we keep a counter of how many requests that identifier has made in the current minute, so that a stolen credential cannot be used to hammer the server. The counter is stored with the identifier as its key and deletes itself after two minutes. We do not store the transaction itself, and we keep no record of who requested what.
Regulation data download. The app downloads the full set of regulation files, the same set for everyone. It does not ask for the markets you own in, so the request does not reveal them.
Our hosting provider. The data server runs on Cloudflare. Like any web request, yours reaches them with your IP address attached. We do not log it, do not store it, and never see it in a form tied to a subscriber, but it does pass through their network and is handled under their terms. When a request fails authentication we record only the reason it failed — never the token, the identifier, or the address.
Opening a source link. Tapping an official source opens that jurisdiction’s website in Safari. From that point you are on their site, under their privacy practices, not ours.
Alerts about regulation changes and upcoming deadlines are generated on your device from data already downloaded. We do not operate a push server and cannot target a notification at an individual user.
Subscriptions are processed by Apple. We never see your card details, billing address, or Apple ID. Apple provides us only aggregate sales reporting.
Lodgepost is a tool for property operators and is not directed at children. We do not knowingly collect information from anyone, of any age.
If this policy changes, the date at the top changes and the current version is always at this address.
hjcwg485@yahoo.co.jp