Privacy Policy

UrbexspotsNL operates a curated map and community of abandoned and historic locations across Europe. The service is offered as a web application with both free and VIP membership tiers.

For any privacy-related questions you can always reach us at urbexspotsnl@gmail.com.

To use most features of UrbexspotsNL you need an account. When you register we store an email address, a unique user ID, the date your account was created, and your membership status (free or VIP).

You can sign up with email and password, or via a third-party identity provider listed below.

When you sign in with Google we receive your name, email address and profile picture URL through Google's OAuth flow. We never receive or store your Google password. You can disconnect Google at any time from your account settings.

When you sign in with Apple we receive your email (or Apple's private relay address if you choose to hide it) and a stable user identifier. We do not receive your Apple ID password. You may use Apple's "Hide my email" feature without losing access to the service.

Passwords are never stored in plain text. They are hashed and salted by our authentication provider. We cannot see, recover or export your password — only reset it via the email address on your account.

The personal data we may store includes:

• Email address and authentication identifiers
• Display name and avatar (if provided by you or your provider)
• Membership tier, subscription status and renewal dates
• Spots you bookmark, favorite or interact with
• Basic technical metadata (device type, browser, IP, timestamps)

We do not sell your personal data and we do not share it with advertising networks.

We use a small number of strictly necessary cookies and browser-level session/local storage to keep you signed in, remember your preferences (such as theme) and protect against abuse. We do not use third-party advertising cookies.

We use privacy-respecting analytics to understand which features are used and to improve performance and stability. Analytics data is aggregated and does not identify you personally. We do not use analytics to build advertising profiles.

VIP memberships are processed by Stripe, a PCI-DSS Level 1 certified payment provider. Card details are entered directly on Stripe's secure infrastructure — we never see, store or transmit your full card number, CVC or expiry date.

From Stripe we receive a customer ID, the last four digits of your card, the card brand, the country, and the status of your subscription. This information is used only to manage your membership and provide receipts.

You can cancel your VIP subscription at any time from your account. After cancellation you keep VIP access until the end of the current billing period. Refunds for unused time are reviewed case-by-case in line with applicable EU consumer law. Email urbexspotsnl@gmail.com for any billing question.

We use your data only to:

• Provide, secure and maintain the UrbexspotsNL service
• Authenticate you and protect your account
• Process subscriptions and send transactional emails
• Improve features, performance and the map experience
• Comply with legal obligations

Data is stored on managed cloud infrastructure with encryption in transit (TLS) and at rest. Access to production systems is restricted, logged and protected with strong authentication. We regularly review our security posture and apply industry best practices, including row-level security on user data.

We keep your account data for as long as your account is active. When you delete your account we remove your personal data within 30 days, except where we are required to keep limited records (for example invoices) for legal or accounting reasons.

Under the GDPR and similar laws you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and personal data
• Export your data in a portable format
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email urbexspotsnl@gmail.com.

UrbexspotsNL is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has registered, contact us and we will remove the account.

We may update this Privacy Policy as the service evolves. When we do, we will update the "Last updated" date at the top of this page and, for significant changes, notify you by email or in-app.

For any privacy question, request, or concern please contact us at urbexspotsnl@gmail.com. We aim to respond within 14 days.