Fotocasa Properties and Details Scraper

Current collection status

Fotocasa's legal notice was reviewed in Chrome on 2026-09-23. It limits use of site information to personal needs, bars direct or indirect commercial exploitation, and requires prior written authorization to reuse listing material on unrelated sites. No applicable written authorization is recorded. The Actor therefore defaults to SUCCEEDED / SKIPPED_POLICY and makes zero source requests.

An earlier browser review captured one public detail payload for an offline parser contract test. No Actor dataset or run-summary records are saved, and no successful local Actor extraction has been compared with a stored row. The captured payload and test are not a live run or proof of current extraction coverage.

Authorization input

authorizationConfirmed defaults to false. Set it to true only when current written authorization covers the intended collection and reuse. This is an operator attestation; it does not grant permission. Without the literal boolean true, the Actor writes no dataset rows and stores SUCCEEDED / SKIPPED_POLICY with requestCount: 0 in OUTPUT.

Inputs and output contract

Inputs support a search URL or filters for location, operation, property type, price, size, publication date, and sort order. The dataset schema describes more than 20 optional source-mapped fields, including price, property characteristics, structured location, agency profile, media, features, energy certificate, and source flags. These are possible fields, not proof that every current page emits them. Phone numbers behind reveal controls are not included.

Offline validation

Run npm test, npm run lint, and apify validate-schema. The tests use captured or injected offline data and validate the zero-request default gate; they do not make a Fotocasa request. The source client's proxy input was removed because it was unused and the current review has no authorization for collection.

Run outcomes

A clean empty result is SUCCEEDED / COMPLETED; a request failure before any property row is FAILED / FAILED; and a later failure after property rows is SUCCEEDED / PARTIAL. Diagnostics and test fixtures are not dataset items. The default policy gate is SUCCEEDED / SKIPPED_POLICY.

Dependency remediation — October 3, 2026

This Actor uses native HTTP and parser code, with a small readable default-storage adapter and the pinned official Apify logger. The unused SDK/crawler/proxy/cache dependency graph was removed because its current http-cache-semantics advisory has no released fix. Cloud storage uses the documented Apify REST interface and bearer headers; local writes append indexed JSON without overwriting historical rows. Storage failures propagate and ambiguous POST writes are not retried. Native exit codes and source authorization/access gates are preserved. Node 22.19+ is required. The source remains unqualified until its existing permission/access prerequisites are met.

Relevant advisory: https://github.com/advisories/GHSA-ch52-4w7c-c8xp. Runtime regression checks: node --test test/platform.test.js.