How The Internet Square uses information needed to run the city, accounts, rankings, ads, and payments.
The controller is Leonardo Santos Jacyntho, trading as The Internet Square (Einzelunternehmen), Moosstr. 41, 85356 Freising, Germany.
Email: contact@theinternetsquare.com. You can contact us about your data without signing in. Full provider details are in the Impressum.
Depending on how you use the city, we may process:
We use information to create and protect accounts; display the city and public citizen identity; run rankings, points, messages, and notifications; provide paid residency and moderated advertising; prevent abuse; respond to support requests; and meet legal obligations.
Account, room, messaging and purchase processing supports the service you request (GDPR Article 6(1)(b)). Security, abuse prevention and limited operational logs support safe operation (Article 6(1)(f)); you may object where applicable. Optional news and external-media connections rely on your choice/consent (Article 6(1)(a)), which you may withdraw. Statutory accounting and legal obligations may require some records (Article 6(1)(c)). Operator and jurisdiction-specific details still require review.
We use Supabase for authentication, database and creative storage; OVHcloud for the VPS, apartment database and email delivery; Stripe for payments and billing; and Cloudflare for site delivery/security and the Turnstile anti-abuse check. Fonts and the Supabase browser library are hosted by this website. If you allow external media, YouTube/Google receives device and connection information under its own policies. SoundCloud receives device and connection information if you separately allow its embedded player; opening an external SoundCloud link also connects to SoundCloud. Provider contracts, hosting regions and international-transfer safeguards still need operator review; providers are not assumed to process only within the EU. We may disclose information where necessary to enforce terms, address safety or rights complaints, prevent fraud, or comply with a legal obligation.
Public profile information, point rank, approved campaign content, and city activity are visible to others when the product presents them publicly. Do not add private information to a public name, ad, or message.
We keep information only for as long as needed to operate the feature, resolve a dispute, meet legal obligations, or protect the service. You can edit your citizen profile in the city. Signed-in citizens can submit and track a request for access, correction, deletion, restriction, objection or portability. This form is also available before accepting the 18+ declaration. The administrator reviews requests; it does not automatically issue a refund or delete an account. You may also send a request to contact@theinternetsquare.com or the postal address in the Impressum without an account. We may request proportionate information to establish your identity before disclosing or changing personal data.
Profiles and apartment possessions are kept while the account exists. Deleting an account queues removal from the separate apartment database, with retry if it is unavailable. Other people’s messages mentioning you, financial records, security evidence and backup copies may need separate review. The email safety counter contains no recipient details and expires after 90 days. A complete retention schedule and backup-expiry policy still require operator confirmation; no automatic deletion period is promised for unspecified categories.
You have the right to lodge a complaint with a data-protection supervisory authority, including in the country where you live or work. For the operator in Bavaria, the relevant authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).
If you link Discord in Account settings, we store your website account ID and Discord user ID to synchronize the VIP role with your current membership. One-time link codes are stored as hashes and expire after ten minutes. We do not need your Discord password or read your conversations. The bot processes commands you send to it. You can unlink in Settings; we remove the VIP role and the stored link. If Discord is temporarily unavailable, a minimal pending-unlink record is kept until removal can finish. Account deletion also requests unlinking. Discord processes data under its own privacy policy.
Necessary browser storage keeps you signed in and remembers requested settings, such as your citizen, camera and room preferences. Signing out clears the active authentication session; clearing site data also removes local settings. YouTube is not contacted by the music selector or cinema player until you allow external media. Your external-media choice is stored for up to 180 days. Revoking it reloads the city to disconnect already-loaded players. Security checks may use necessary storage separately.
News is opt-in. Optional emails include a signed unsubscribe link that does not require login; opening it shows a confirmation, and confirming switches off optional news, market and new-chat emails. Password/security and essential billing messages are not marketing preferences.
External links and promoted destinations have their own privacy practices. Information about provider agreements, international transfers and the retention periods marked for review above will be updated after the corresponding operational checks are complete.
Our public declaration form does not require login. We record the name, confirmation email, contract description, declaration type, requested end date and any required extraordinary-cancellation reason, together with a receipt reference, submission time, delivery status and processing updates. Do not include passwords, payment-card details or identity documents.
We use this information to identify and administer the contract, meet consumer-law duties and document receipt and resolution of the declaration (GDPR Article 6(1)(b) and (c)). Access is restricted to administrators; receipt and processing emails are delivered through OVHcloud. The data is not shown on citizen profiles and is not used for marketing. Delivery failures are retried without changing your original submission time.
Records are retained while processing is open and thereafter where needed to document contractual rights, resolve disputes or meet applicable recordkeeping duties. Automatic deletion is disabled pending review of the retention and legal-hold schedule; administrators must review retention and deletion requests individually. Contact the controller above to exercise your data rights.
Signed-in citizens can privately report website or Discord users. Reports contain the reporter’s account ID, reported identifier, explanation and optional evidence link; only website administrators can review them. Reports are retained for up to 90 days and are not automatically published or used to ban someone. Linked Discord members receive Citizen and, while entitled, VIP roles. Unlinked human members receive Unlinked. Citizen means account-linked, not government identity verification. The bot periodically reads the server member list to keep those roles up to date; it does not save the unlinked member list or read messages. We synchronize their server nickname with their city nickname where Discord permissions allow. We also retrieve your Discord username for the optional profile label and refresh it periodically. Public Discord usernames and profile links are off by default and can be enabled or hidden in Settings. Unlinking removes both managed roles and the public link; it does not restore an earlier server nickname.
SoundCloud playback requires separate, page-session permission before the player connects to SoundCloud. Stop playback using the music player’s close button; reload to reset that permission. The existing YouTube preference remains separate.
You can submit and purchase advertising without creating a citizen account. We use your purchase email for a private advert-access link, approval and payment updates. The link opens only that advert and expires after 30 days; requesting a replacement invalidates the old link. Your browser tab remembers the link so you can return from checkout. Keep it private, especially on shared devices; use “Close private advert” when finished.
If you later sign in with a verified account using the same email, we connect the guest orders and adverts to that account and disable their guest links. No citizen profile is created just by submitting an advert. Hashed email and connection identifiers are used for short-term request limits; counters older than two days are removed when new guest requests are processed. Purchase and email-delivery records follow the retention and rights information above.