VALUECORRIDOR

Privacy policy

Effective 12 October 2026

The ValueCorridor is a practice tool for real estate agents: you price homes that already sold, with the sale price hidden, and see how close you came. This page says what the website and the phone app collect, why, who else handles it, and how to delete it.

Who runs this

The ValueCorridor is operated by Max Willett. For anything about your data, write to maxwillett12@gmail.com.

What we collect

• Your account: your email address, your display name (handle), your password, which is stored only as a one-way hash we cannot read back, the state you are licensed in and, if you give it, your licence number.
• Your profile, if you fill it in: your name, job title, company, market, the year you started, a photo, a phone number and public email, a short bio and links. All of it is optional.
• Your practice: every estimate you make, the range you give, how long you took, and the points it earned. To keep the rankings fair, a rep is marked unranked if the tab lost focus while you were pricing or you took far longer than you usually do. That is the only thing watched, and a marked rep still counts toward your own practice.
• The Price Tester: the facts of a property you submit and the price you propose. It never asks for the address. Other agents price it without knowing who submitted it, and you see their reads without their names.
• CMAs: the addresses, comparables, figures and marketing pages you put into a CMA. They are private to you.
• Teams: the teams you create or join. Members of a team see each other's figures from the day they joined.
• Feedback: anything you send through the Feedback form.
• The waitlist: if your state's full market is not live yet and you join the waitlist, the email address and state you give. It is used only to tell you when your state's full market goes live, and it is not tied to an account. To be taken off it, write to maxwillett12@gmail.com.
• Sign-in protection: the email and IP address of sign-in attempts, used only to slow down password guessing.

The phone app

The app shows the same website, so everything above applies. If you turn on sign-in with Face ID or your fingerprint, your email and password are saved in your phone's secure storage and unlocked by the phone itself. Your face or fingerprint never leaves the phone, and nothing extra is sent to us. You can turn it off under Me.

If you turn on notifications, your phone gives the app a notification token, which we keep so we can reach that phone, and Firebase Cloud Messaging (Google) delivers the notifications. There are four kinds: reads on a home you put through the Price Tester, a streak or practice reminder, the Daily 5 each morning, and the occasional announcement. None of them shows a price or a figure. You can switch each one off under Me, and signing out stops them on that phone.

Beat the House alerts (someone sat down at your table, or a game you asked about started) come to the app the same way. In a web browser, if you turn them on, your browser gives us a push address and two keys, which we keep so we can reach that browser; the browser's own push service (Google, Mozilla, Apple or Microsoft, depending on the browser) delivers each alert, encrypted so that service cannot read it. These alerts show a name, a stake and a market, never a figure. You can switch them off, set quiet hours and a daily limit in Beat the House, and signing out stops them in that browser.

The homes in the drill

The homes you price are closed sales from MLS exports and public records. A closed sale's address and price are public record. Owner names and agent names are never imported.

Who else handles data

We use a few services to run the site. Each sees only what its job needs:

• Netlify hosts the site and its database, stores profile photos, and collects Feedback messages and waitlist sign-ups.
• Brevo sends our email: sign-up codes, password resets, reminders and announcements.
• Anthropic, through Netlify's AI gateway, reads a listing sheet or market report when you ask the app to fill a form from one, and writes a CMA's analysis from that CMA's figures when you ask for it.
• RealEstateAPI supplies the live listings in an area. No personal data is sent to it.
• Firebase Cloud Messaging (Google) delivers the app's notifications, if you turn them on. It receives your phone's notification token and the text of each notification.
• Your browser's push service (Google, Mozilla, Apple or Microsoft) delivers Beat the House alerts to a browser, if you turn them on there. It receives your browser's push address and each alert encrypted, which it cannot read.
• Your browser also loads a few things directly: fonts from Google Fonts, the Leaflet map library (from unpkg), and map imagery from Esri and OpenStreetMap. Like any website request, those services see your IP address.

We do not sell your data. There are no ads and no analytics or tracking scripts. The site sets one cookie, which keeps you signed in for up to 30 days. Your browser also remembers a few preferences, like the theme and your drill setup, on your own device. If you try the home on the front page before you have an account, your guess is kept in that browser for up to a day, so that signing up can make it your first rep; it never counts toward any ranking.

What other agents can see

Your handle and your ranking figures appear on the leaderboards, and the top of the board, with handles, appears on the public home page. Other signed-in agents can open your profile and see the fields you chose to fill in. Your Price Tester submissions and your reads on other agents' properties are anonymous. In a random duel, an agent who takes the other seat sees your display name. When nobody does, your opponent may be a "ghost": another agent's earlier blind prices on the same homes. Your own blind prices can be a ghost the same way. A ghost is never named. Once a duel is decided, either side can replay it home by home, and the replay shows both sides' prices on each home, a ghost's included. In a live duel, the other player sees your display name and the messages and reactions you send in its chat, which are kept with the duel until you delete your account; anyone with the live link can see who is waiting in a lobby. In a 2v2, anyone with the invite link can see the names in its seats, and once it is decided all four players see each other's prices and each player's own median error.

Email

We email you a code when you sign up or reset your password. We may also send a practice reminder, at most once every six days, and the occasional announcement. Every one of those has a one-click unsubscribe link, and you can turn them off on your profile. If you have notifications on in the app, the practice reminder and the Daily 5 come as a notification instead of an email. If another agent challenges you to a duel, we email you once to say so, with their display name, and if you finish your ten first, once more when the duel is decided, with both of your median errors; those mails follow the same reminder setting and unsubscribe link. When you challenge someone, they see your display name. If you ask Beat the House to tell you when someone joins your table or a game starts, and no phone or browser of yours takes the alert, it comes by email instead, within the limits you set there and with the same unsubscribe link.

Keeping and deleting your data

We keep your data while you have an account. To delete it, sign in on the website or in the app, open your profile and use Delete my account (in the app it is also under Me). You confirm with your password. Deleting removes your email, name, handle, password, your photo and profile, your CMAs, your teams, your duels, your live duels and what you said in their chat, your place history on the leaderboard, your bonus XP, your saved Data Crunch reports, the properties you put in the Price Tester, your Beat the House chips, hands, rating and alerts, and the phones and browsers registered for notifications, and you are signed out everywhere. The homes you priced stay in the platform's figures with no name attached, so other agents' figures do not change.

If you cannot sign in, reset your password from the sign-in screen, or write to maxwillett12@gmail.com and we will delete the account for you. You can also download every rep you have logged as a spreadsheet from your profile.

Who it is for

The ValueCorridor is built for real estate professionals and is not meant for anyone under 18.

Security

The site is served only over HTTPS. Passwords are stored as one-way hashes, the sign-in cookie cannot be read by scripts, and repeated wrong passwords are slowed down.

Changes

If this policy changes, the new version goes here with a new date at the top.