1. Who we are
CityStalker is operated by Selim Salihoğlu as an individual. For the purposes of the General Data Protection Regulation (GDPR), Selim Salihoğlu is the data controller.
Contact: support@citystalker.app
2. Data we collect
We collect information you provide when creating and using an account, including your name, username, email address, birth year, home country, home city, selected local-question categories, and avatar choice.
We also process content and activity you choose to submit, including questions, replies, helpful votes, reports, moderation records, notification activity, and timestamps. Authentication and basic technical security information may be processed by our service providers.
3. How we use data
- Create and secure your account.
- Show questions to relevant locals and enable city-based discussions.
- Display usernames, avatars, local status, questions, and replies to signed-in community members.
- Deliver in-app notifications and maintain helpful-vote counts.
- Review reports, prevent abuse, enforce community rules, and protect the service.
- Respond to support and privacy requests and comply with legal obligations.
4. Legal bases
We process account and service data because it is necessary to provide the service you request. We process safety, security, abuse-prevention, and service-improvement data based on our legitimate interests. Where consent is legally required, we will request it separately. We may also process data to comply with legal obligations.
5. Service providers and transfers
CityStalker uses Google services, including Firebase Authentication, Cloud Firestore, Firebase App Check, and Google Sign-In, for authentication, database hosting, and security. CityStalker also supports Sign in with Apple, which allows Apple to provide an account identifier and, when authorized, a name and email address for authentication. These providers process data under their applicable terms and privacy safeguards. Depending on service configuration, data may be processed outside Greece or the European Economic Area using legally recognized safeguards where required.
6. Retention and account deletion
We retain account data while your account remains active and as needed to provide and secure the service and comply with related legal obligations. You can permanently delete your account from the Profile screen.
When an account is deleted, its authentication record and private profile are deleted. Public questions and replies may remain to preserve the integrity of discussions, but they are anonymized as “Deleted User” and are no longer linked to the deleted account. Reports and security records may be retained for a limited period where reasonably necessary for safety, dispute handling, or legal compliance.
7. Your rights
Subject to the GDPR and applicable law, you may have rights to access, correct, erase, restrict, or object to processing of your data, and to receive portable data. You may withdraw consent where processing relies on consent. To exercise a right, email support@citystalker.app. You may also lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority.
8. Children
CityStalker is not intended for children under 16. We do not knowingly permit children under 16 to create accounts. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate.
9. Security and changes
We use technical and organizational measures designed to protect personal data, including authenticated access, database security rules, moderation controls, and application-integrity checks. No system can guarantee absolute security.
We may update this policy as the service or legal requirements change. The effective date at the top will identify the latest version.