Privacy Policy
This policy explains how Individual Entrepreneur Ildar Ildarkhanov, trading as IL DARK (“we”), processes personal data when you use urban:STREET at https://urban-street.ildar.space. We are the data controller. Contact: [email protected].
1. Data we collect
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address; name and profile picture if you sign in with Google | Creating and securing your account, sign-in emails, service and billing notices | Contract |
| Streets you save, template corrections you submit | Providing the Service | Contract |
| Download counters per month, plan and subscription status, promo codes used | Applying plan limits and Pro access | Contract |
| Paddle customer and subscription IDs, subscription status and dates | Linking your payment to your account | Contract |
| Technical data: IP address, browser, request logs | Security, abuse prevention, troubleshooting | Legitimate interests |
We do not collect card numbers: payments are handled by Paddle.com as Merchant of Record, which processes your billing data under its own privacy policy. Designing streets without signing in stays in your browser; nothing is sent to us.
2. Cookies and local storage
We use only strictly necessary browser storage: your sign-in session, language and interface preferences, and an autosaved copy of your current street. We do not use advertising or analytics cookies. Paddle’s checkout may set its own cookies needed to process payment and prevent fraud.
3. Processors
- Supabase — account authentication and database hosting.
- Vercel — website hosting and server functions.
- Paddle.com — payments, invoicing, tax, subscription management (Merchant of Record).
- Google — optional sign-in with Google; Google Fonts for typography.
- jsDelivr / Cloudflare CDN — delivery of open-source libraries (e.g. PDF export, Rhino file writer).
These providers may process data outside your country, including in the United States, under appropriate safeguards such as Standard Contractual Clauses.
4. Retention
Account data is kept while your account is active. When you delete your account we delete your profile, saved streets and suggestions within 30 days, except records we must keep for legal, tax or fraud-prevention reasons. Server logs are kept for a limited time by our hosting providers.
5. Your rights
You may request access to, correction, deletion or export of your personal data, object to or restrict processing, and withdraw consent where processing is based on consent. Write to [email protected]; we answer within 30 days. You also have the right to complain to your local data protection authority.
6. Security
Data is transmitted over HTTPS. Database access is restricted per user by row-level security; administrative access is protected by credentials. No system is perfectly secure, but we take reasonable measures to protect your data.
7. Children
The Service is not intended for children under 16, and we do not knowingly collect their data.
8. Changes
We will post updates on this page and notify account holders of material changes by email.