Controller and contact
The controller for processing is ERSATO UG (haftungsbeschränkt). Full provider details are available in the imprint.
- Privacy contact: [email protected]
- Updates to this notice are published on this page.
- No data protection officer is named unless a legal duty to appoint one exists.
Account and profile
For registration, login, profiles, friends, groups, lists, creator applications, levels, XP, credits and settings, we process account data.
- This includes email, display name, bio, profile image, home-region information, roles, blocks, notification settings and security data.
- Public profile fields may be shown on web profiles, lists, comments, creator badges and leaderboards.
- Non-public values such as credit balance are not exposed through public profiles.
Location and map features
Location data is used only for features you actively use or enable in the iOS settings. Discover Me and broader location features are separate.
- Discover Me is only for finding nearby users and being discoverable yourself.
- Additional location features may support auto mode, Nearby Places, Presence Proof and Explore Together.
- Explore Together uses a separate permission and shows live locations only inside the relevant session.
- The web version does not request browser geolocation.
Places, comments and media
If you publish places, comments, logbook entries, images, videos, lists, blog references or markers, we process them according to the selected visibility.
- Public content may appear on web pages, search engines, maps, profiles, lists and feed items.
- Private places remain private, but may become visible to members of a list when added to that list.
- Media may include metadata such as author, related place and timestamp.
- Sensitive coordinates can be reduced or protected on the web where the feature requires it.
Chats, groups and notifications
For direct messages, groups, list chats, message requests, the notification center, push notifications and app badges, we process communication and delivery data.
- Chat content, media and group permissions are stored for delivery, sync, moderation and abuse prevention.
- Push tokens and app tokens are used to deliver notifications and can be revoked.
- Notification preferences can be managed in the app.
Premium, credits and payments
Premium subscriptions, credit purchases and paid actions are processed to provide entitlements, transaction references, support and abuse protection.
- iOS subscriptions and in-app purchases are handled by Apple; Apple is independently responsible for its payment processing.
- Web payments may be handled through PayPal or other configured providers.
- We store product IDs, transaction references, status, terms, entitlements and ledger entries, but not full payment credentials.
YouTube, Instagram and external services
If you link social accounts, we process the data needed for linking and display.
- YouTube linking is available to Creator accounts and can connect videos to places.
- Instagram linking may be used for creator verification and profile display.
- External providers process data under their own privacy rules.
Technology, security and operations
We process technical data to provide, secure and stabilize the service.
- This includes IP address, timestamps, device and app information, server logs, rate-limit data, error reports and security events.
- Actions such as views, sharing, navigation, favoriting or opening an object may be counted with timestamps.
- Offline actions may be cached locally and synchronized later.
Cookies, local storage and advertising
The web version uses necessary cookies and local storage for login, security, language, theme and comfort features. Advertising is embedded only when configured and may be disabled for Premium users.
- Non-essential tracking or advertising technologies may only be used where the required consent exists.
- The iOS app uses local caches, offline data and system settings so core features can work without a connection.
- App Store Privacy Labels and the privacy manifest must reflect the actually used data categories.
Retention
We keep personal data only for as long as required for the function, contract performance, security, legal obligations or legitimate evidence.
- Account data generally remains stored until the account is deleted.
- Public content may be deleted, anonymized or retained where legitimate reasons apply.
- Payment and ledger data may be kept longer due to statutory retention obligations.
- Security logs are deleted or anonymized after the required protection and evidence period.
Your control
Depending on applicable law, you may have rights of access, rectification, deletion, restriction, portability, objection and withdrawal of consent.
- Many profile, visibility, location and notification settings can be managed in the app.
- You can block users and report content.
- Privacy requests can be sent to [email protected] or through the feedback form.
- You may lodge a complaint with a data protection authority.
Minors
Urbex Buddies is not directed at children. Dangerous locations, private property and location features are especially sensitive for minors.
- Where regional law requires parental consent, the app may only be used with that consent.
- We may suspend or delete accounts if unauthorized minor use becomes apparent.
Regional notes
For users in the European Economic Area, GDPR, national data-protection law and digital-services rules apply in particular. Other regions may provide additional rights.
- The German version is the primary working version for a German operator.
- The additional language versions support the respective language editions.
- Local mandatory notices, consumer rights and privacy contacts may differ by region.