Last updated October 2026 · Tulsa, Oklahoma
Neighborhood Blocks gives apartment buildings one public page. Property managers build the page; residents just open it. Here's what that means for data.
Residents never create an account, set a password, or install an app. Opening a building's page doesn't require telling us who you are. We don't sell resident data, and we don't share it with advertisers — full stop.
A few features store small preferences on your own phone (like a saved building, or a cached map location) using your browser's local storage. That data stays on your device and never reaches us.
When you look at a page without signing in, we learn a few things about the visit, to keep the pages fast and working on the devices people use: how quickly the page loaded, the page's address (without anything after a question mark), the kind of browser and system (for example Chrome on Android), whether it is a phone, tablet or computer, the screen size, the language setting, light or dark mode, and the website that sent you here, if any. For a visit like this there is no ID, no cookie and no raw browser description, so we cannot tell one visitor from another, and we never store your IP address; to limit abuse, a scrambled fragment shared by many visitors is used for counting. We use these counts only to see which pages are read, on what kinds of devices, and to fix what is slow.
When a resident uses Deco to find help, the request is counted once — anonymously — so our public Pulse page can show how much need is moving through each city. No name, unit, or answer content is attached to that count, and property managers only ever see totals — never who asked. If you choose to share a phone number or email so someone can follow up, that goes only to the Neighborhood Blocks support team. It is not shown to your landlord.
To build a block you sign in with an email address. We store your account email, the building details you enter (name, address, guide answers, links, photos), and your plan status. That content is what powers your building's public page — everything on the public page is there because you put it there.
When you sign in, a sign-in token in your browser keeps you signed in until you sign out. We, and Supabase, who runs our sign-in, keep a record of when you sign in and from what kind of browser and device, with your IP address, so we can spot someone else using your account and help if something goes wrong. Our own team's use of the admin tools is logged too.
If a building asks residents for feedback (a survey or its feedback form), responses go to that building's property manager. They don't appear on the public page.
When an organization asks to join Deco, the name, contact, email, phone, website or intake link, and what it says it helps with go to the Neighborhood Blocks team, so we can set up its door. They are not shown on any page until the organization has checked what Deco will say about it.
Our infrastructure providers process data on our behalf: Supabase (database, authentication, and photo storage), Netlify (hosting), Stripe (billing for paid blocks; card details go to Stripe, never to us), and, in the landlord builder only until our own QR drawing has loaded, a QR-code image service. Our typefaces are served from our own site, so no font request goes to anyone else.
The map page and each building's City Passport use Google Maps Platform: the map's streets come from Google's Map Tiles API, and the nearby places in the City Passport come from Google's Places API. If Google isn't available, the map falls back to tiles from Esri and OpenStreetMap, and the City Passport to OpenStreetMap's place data (Overpass). Building pages and the builder look up addresses with OpenStreetMap services (Nominatim, and Photon by Komoot), and the map page loads its map library from jsDelivr. A place's Map link opens it in Google Maps. These requests carry a building's location or address, never your name; like any request your phone makes, they carry its IP address. Google's handling of them is covered by Google's privacy policy.
No ads, no ad trackers, no selling or renting data, no data brokers. Your property manager stays the system of record for leases and payments — rent is paid wherever it was already paid, and those payments never pass through us.
Property managers can unpublish or delete a block at any time. Residents who shared contact info through Deco can ask us to delete it. Email us and we'll take care of it.
Email hello@neighborhoodblocks.org and a person will answer.
This page is a plain-language summary of how the product works today. As Blocks grows, we'll keep it current — the date above tells you when it last changed.