THE INTERNET SQUAREPrivacy
How The Internet Square uses information needed to run the city, accounts, rankings, ads, and payments.
Effective: 1 September 2026 · Last updated: 1 September 2026 · This notice will be completed with the operator’s final business contact details before public commercial launch.
Controller details are being finalised
The operator will publish its legal name, postal business address, and public contact email in the Imprint before taking the service public commercially. Until then, this page is a transparent privacy draft, not a replacement for the final legally required information.
The final controller information and any applicable data-protection contact will be added once the Einzelunternehmen details are available.
Information processed
Depending on how you use the city, we may process:
- Account information: email address, authentication identifiers, and account confirmation information handled through Supabase.
- Citizen information: chosen display name, avatar configuration, public city appearance preference, points, level, and public ranking position.
- City activity: general and private messages, notifications, saved city position where applicable, and interactions such as billboard votes.
- Campaign information: brand name, headline, destination URL, uploaded creative, campaign status, buyer email, and moderation notes.
- Payment information: order and payment-status identifiers. Stripe collects payment-card and billing details directly; we do not store full card numbers.
- Technical information: information required to deliver and secure the service, such as browser session data, necessary local settings, and standard network request information processed by service providers.
Why we use this information
We use information to create and protect accounts; display the city and public citizen identity; run rankings, points, messages, and notifications; provide paid residency and moderated advertising; prevent abuse; respond to support requests; and meet legal obligations.
Where the GDPR applies, the legal basis will generally be performance of the requested service, legitimate interests in operating a safe and reliable community, consent where it is needed, and legal obligations where applicable. The final notice will identify the relevant basis for each processing activity in more detail.
Service providers and sharing
We use Supabase for account, database, and storage features, and Stripe for payment processing and billing management. These providers process information only as needed to provide their services. We may disclose information where necessary to enforce terms, address safety or rights complaints, prevent fraud, or comply with a legal obligation.
Public profile information, point rank, approved campaign content, and city activity are visible to others when the product presents them publicly. Do not add private information to a public name, ad, or message.
Retention and your choices
We keep information only for as long as needed to operate the feature, resolve a dispute, meet legal obligations, or protect the service. You can edit your citizen profile in the city. You may ask about access, correction, deletion, restriction, objection, data portability, or withdrawal of consent where applicable using the final contact details in the Imprint.
If you believe your rights have been affected, you may also have the right to complain to a data-protection supervisory authority.
Browser storage and cookies
The city uses necessary browser storage and session mechanisms to keep you signed in and remember service settings, such as city preferences. If optional analytics, advertising, or other non-essential storage is added later, this notice and the consent flow will be updated before it is used.
External links and promoted destinations have their own privacy practices. Once you leave The Internet Square, review the privacy information of the destination you visit.