Your privacy matters to us. This policy explains clearly what data UrbexWorld collects, why we collect it, how we use it, and what rights you have. We do not sell your personal data — ever.
1. About UrbexWorld
UrbexWorld is a mobile application developed and operated by UrbexWorld ("we", "us", "our"). The app allows users to discover, share, and explore abandoned locations around the world. Users can create accounts, submit locations, write reviews and blog posts, and interact with a community of urban explorers.
This Privacy Policy applies to all users of the UrbexWorld mobile application on Android and iOS platforms.
2. Data We Collect
We only collect data that is necessary to provide and improve the UrbexWorld experience.
2.1 Account Data
- Email address — used to create and authenticate your account, and to send account-related emails such as verification codes and password resets.
- Username — a publicly visible display name chosen by you. Your username appears on your profile, reviews, blog posts, and in the community chat.
- Password — stored securely as a hashed value. We never store or have access to your plain-text password.
2.2 Location Data
- Approximate device location — used to show abandoned locations near you on the map and to sort the location list by distance. Location data is processed in real time on your device and is never stored on our servers.
2.3 User-Generated Content
- Locations — locations you submit, including name, description, coordinates, photos, and access information.
- Reviews — ratings, written reviews, and photos you attach to locations.
- Blog posts — articles and stories you write and publish within the app.
- Chat messages — messages you send in the community chat.
2.4 App Activity
- Locations you have saved, visited, or unlocked.
- Your XP points, level, and leaderboard ranking.
- Number of locations viewed and saved (used to display statistics).
2.5 Device Data (via Google AdMob)
- Advertising ID — a resettable device identifier used by Google AdMob to serve relevant advertisements. This ID is shared with Google but not with us directly.
3. How We Use Your Data
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and manage your account | Email, username, password | Contract performance |
| Show nearby abandoned locations | Device location (temporary) | Legitimate interest |
| Display your profile and activity | Username, XP, saved/visited locations | Contract performance |
| Publish your content | Locations, reviews, blog posts, chat messages | Contract performance |
| Display advertisements | Advertising ID (via AdMob) | Legitimate interest / Consent |
| Moderate content and prevent abuse | Account data, content data | Legitimate interest |
| Send verification and account emails | Email address | Contract performance |
4. Advertising
UrbexWorld displays advertisements through Google AdMob. AdMob may use your Advertising ID to serve personalized or non-personalized ads. Google's use of data in this context is governed by Google's Privacy Policy.
You can reset or opt out of personalized advertising at any time via your device settings:
- Android: Settings → Google → Ads → Reset Advertising ID or Opt out of Ads Personalization
- iOS: Settings → Privacy → Apple Advertising
5. Data Sharing
We do not sell your personal data to any third party. We share data only in the following limited circumstances:
| Recipient | Purpose | Data shared |
|---|---|---|
| Supabase (supabase.com) | Database and authentication provider | Account data, user content, app activity |
| Google AdMob | Serving in-app advertisements | Advertising ID |
| Law enforcement / legal authorities | Legal compliance when required by law | Relevant account data |
6. Data Retention
We retain your data for as long as your account is active. Specific retention periods:
- Account data — retained until you request deletion of your account.
- User-generated content — retained until you delete it or your account is deleted.
- Location data — never stored; processed in real time and discarded immediately.
- Chat messages — retained indefinitely as part of the community chat history.
After account deletion, we may retain anonymized or aggregated data that cannot be linked back to you for analytical purposes.
7. Data Security
We take appropriate technical and organizational measures to protect your personal data:
- All data is transmitted over encrypted HTTPS connections.
- Passwords are stored as secure hashes using industry-standard algorithms.
- Our database infrastructure (Supabase) uses Row Level Security (RLS) to ensure users can only access their own data.
- We regularly review access controls and security practices.
While we take every reasonable precaution, no system is 100% secure. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.
8. Children's Privacy
UrbexWorld is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has created an account, please contact us at privacy@urbexworld.nl and we will promptly delete the account and associated data.
For users between 13 and 16 in the European Union, we rely on parental consent where required by applicable law.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — request deletion of your account and personal data.
- Right to restriction — request that we limit how we use your data.
- Right to data portability — request your data in a machine-readable format.
- Right to object — object to processing based on legitimate interest.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@urbexworld.nl. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
10. Account Deletion
You can request deletion of your account and all associated data at any time by visiting:
https://steady-custard-786f55.netlify.app/delete_account
Upon receiving your request, we will permanently delete your account and personal data within 7 days and send a confirmation to your email address.
11. International Data Transfers
UrbexWorld operates globally. Your data may be processed in countries outside your own, including the United States, where our infrastructure providers are based. We ensure that appropriate safeguards are in place for such transfers, including standard contractual clauses where required.
12. Cookies and Tracking
The UrbexWorld mobile app does not use cookies. Google AdMob may use similar tracking technologies on your device for advertising purposes, as described in Section 4.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
- Email: privacy@urbexworld.nl
- App: UrbexWorld (available on Google Play)
We aim to respond to all privacy-related inquiries within 5 business days.
© 2025 UrbexWorld. All rights reserved. · Privacy Policy · Delete Account